Senior AI Tech Consultant, Cybersecurity

BCG Platinion is hiring a Senior AI Tech Consultant focused on cybersecurity to support client engagements from strategy through execution. In this onsite role in Philadelphia, PA, you will take end-to-end responsibility for a module within consulting work, applying advanced cybersecurity methodologies alongside GenAI fluency to help clients address cyber and digital risk topics across organizations, product development, and cloud security.

What you’ll do

• Own an individual module within a BCG client engagement and build specialized expertise to help solve client problems.
• Apply generalist consulting skills to strategic cybersecurity and digital risk questions across a range of topics.
• Tackle client strategic, organizational, managerial, and operational issues using advanced cybersecurity tools, techniques, and methodologies.
• Explain how technology enables business strategy, including decomposing the cybersecurity implications of that relationship.
• Analyze cybersecurity requirements, existing tools, and best practices to produce tailored recommendations for a client’s environment.
• Turn complex technical concepts into concise, business value-centric written communication.
• Lead or support cybersecurity transformation and culture change initiatives.
• Run cybersecurity assessments, including gap analysis and roadmap development, across contexts such as organizations, product development, and cloud security.
• Develop cybersecurity strategies, policies, processes, and procedures to protect clients’ internal infrastructure and their customers.
• Build cybersecurity business strategies for technology product vendors aligned to the organization’s overall business strategy and geared toward increasing revenue and profits.
• Collaborate with leadership teams, including facilitating board and senior management cybersecurity awareness workshops.
• Embed product security and DevSecOps practices across software development lifecycles, system designs, and IT architectures.
• Use cyber risk quantification to reduce uncertainty and improve executive decision making.
• Create and facilitate table-top exercises.
• Support operational resilience through incident response, business continuity, and disaster recovery planning.

What you bring

• 4+ years of practical experience in cybersecurity consulting or cybersecurity management, including experience working with teams of five persons or more across varied sectors and contexts.
• A BS in cybersecurity, information systems, mathematics, natural sciences, business management, or a similar degree.
• Hands-on experience or extensive knowledge in developing cybersecurity strategies or policies.
• Hands-on experience or extensive knowledge in quantifying and managing cybersecurity risk.
• Hands-on experience or extensive knowledge in designing, transforming, implementing, and running cybersecurity programs.
• Hands-on experience or extensive knowledge in assessing cybersecurity risks in AI platforms.
• Hands-on experience or extensive knowledge in integrating security into applications and systems.
• Hands-on experience or extensive knowledge in implementing cloud security.
• Hands-on experience or extensive knowledge in managing cybersecurity risk arising from third parties and the supply chain.
• Hands-on experience or extensive knowledge in designing or implementing identity and access management.
• Hands-on experience or extensive knowledge in developing and upskilling a cybersecurity workforce.
• Hands-on experience or extensive knowledge in delivering cybersecurity culture change, awareness, and training.
• Hands-on experience or extensive knowledge in designing continuous monitoring programs incorporating SIEM tools, APT hunting, UBA, and related approaches.
• Hands-on experience or extensive knowledge in designing or implementing vulnerability management, including conducting vulnerability assessments.
• Hands-on experience or extensive knowledge in performing penetration testing, incident management, BCP, and/or DRP.
• Broad knowledge of cybersecurity technologies across the organizational and acquisition lifecycle.
• Working knowledge of at least two cybersecurity frameworks, including: NIST Cybersecurity Framework.
• Working knowledge of at least two cybersecurity frameworks, including: C2M2.
• Working knowledge of at least two cybersecurity frameworks, including: NIST SP 800-53 and companion publications.
• Working knowledge of at least two cybersecurity frameworks, including: the ISO/IEC 27000 family of standards.
• Working knowledge of at least two cybersecurity frameworks, including: Cloud Security Alliance CCM.
• Team-oriented attitude, strong communication and presentation skills, outstanding analytical and conceptual skills, and a results-oriented mindset.
• Confidence and persuasiveness.
• GenAI tool fluency (including demonstrated use of GenAI tools such as ChatGPT and Claude, and validation of responses).
• Business-fluent written and spoken English.
• Willingness to travel globally to work with clients and BCG teams, including significant travel to client sites at times.

Technologies you may work with

• DevSecOps
• SIEM tools, APT hunting, UBA
• GenAI tools including ChatGPT and Claude
• AI platforms
• NIST Cybersecurity Framework, C2M2
• NIST SP 800-53 and companion publications
• ISO/IEC 27000 family of standards
• Cloud Security Alliance CCM

Compensation and benefits

• Base compensation: $150,000 per year (U.S. applicants).
• Annual discretionary performance bonus.
• BCG’s Profit Sharing and Retirement Fund (PSRF) contribution.
• Health insurance premiums paid in full for employees and eligible family members (zero dollars in premiums).
• $10 copays for trips to the doctor, urgent care visits, and prescriptions for generic drugs.
• Dental coverage including up to $5,000 in orthodontia benefits.
• Vision insurance coverage for glasses and contact lenses annually.
• Reimbursement for gym memberships and other fitness activities.
• Fully vested retirement contributions made annually, whether you contribute or not.
• Generous paid time off including vacation, holidays, and annual office closure between Christmas and New Years.
• Paid Parental Leave and other family benefits such as elective egg freezing, surrogacy, and adoption reimbursement.

Where the role may be based

• Atlanta, Austin, Boston, Brooklyn, Chicago, Dallas, Denver, Detroit, Durham, Houston, Miami, Minneapolis, Nashville, New York, Philadelphia, Pittsburgh, Summit, Washington

BCG Platinion’s cybersecurity AI consultants operate as technical experts and business-minded storytellers who translate cybersecurity depth into business value across the technology value chain. The team emphasizes innovation, practical change implementation, and collaboration across interdisciplinary stakeholder groups, supporting clients with customized solutions and measurable transformation outcomes.

BCG Platinion also offers an opportunity to work organically across disciplines and across BCG, combining strategic thinking with hands-on application in a supportive environment.