IT- IT Security Lead Engineer - #254873

Summary: The IT Security Lead Engineer collaborates closely with all IT teams and takes the lead on critical cybersecurity initiatives. This senior position is responsible for driving project tasks, prioritizing key objectives, and owning all aspects of the organization’s cybersecurity efforts. The role requires expertise across multiple cybersecurity domains, including but not limited to IAM, IaC, on-premises and cloud engineering, ZTNA, firewalls, certificates, EDR, SIEM, SOAR, SOC, compliance, group policies, VPNs, SAST, DAST, and the Microsoft stack.

Duties: Architect and Defend: Design robust, high-performance firewall architectures to protect diverse workload types (e.g., servers, Kubernetes, serverless web apps), and justify the security measures.

Mature Cyber Operations: Drive the organization's maturity in areas like VPN usage and approved software, proposing solutions and implementing them after securing sponsorship.

Policy Leadership: Engage stakeholders to document and enforce business-aligned security policies.

Proactive Cyber Leadership: Take ownership of identifying gaps in the organization’s security posture, prioritize improvements, and assume a consultative approach to fortify technical estates.

Automation & Scripting Excellence: Leverage Python, PowerShell, and other scripting languages to implement security as code, mentoring team members in scripting practices and standards (e.g., JSON, YML).

Vulnerability Management: Configure, optimize, and remediate findings from vulnerability scanning tools in a way that aligns with development methodologies.

Alert Optimization: Integrate and refine security alerts from tools like SIEM, endpoint solutions, email security, firewalls, XDR solutions, and hypervisors (VMware, AWS, Azure).

Cloud Security Architecture: Lead public cloud security initiatives, employing tools like Terraform or CloudFormation to implement best practices.

Stakeholder Collaboration: Build trusted alliances with colleagues to lead discussions, propose solutions, and execute cybersecurity implementations effectively.

Tool Evaluation & Implementation: Serve as the subject matter expert to evaluate and implement cybersecurity technologies, leading vendor POCs and making strategic decisions (including open-source options).

Penetration Testing Expertise: Master and utilize tools like Burp Suite, Metasploit, ZAP, Nmap, and OpenVAS to perform and analyze penetration tests.

Regulatory Compliance: Ensure GDPR and PCI documentation is current and enforce technical provisions to meet regulatory frameworks.

Incident Handling & Training: Address escalated technical issues and train team members on remediation strategies.

Baseline Security Practices: Establish and maintain security baselines (e.g., GPOs, risk mitigation templates, cloud/on-prem governance).

Cybersecurity Planning: Develop and maintain priorities, roadmaps, and project plans informed by third-party penetration tests and domain expertise.

Technology Expertise: Secure core technologies such as:- Microsoft Suite of tools

• Entra ID
• Public cloud infrastructure
• Email protection tools
• Firewalls
• XDR and endpoint protection solutions
• MFA tools
• Service Excellence: Manage the ticket queue while ensuring SLA adherence.
• Domestic Travel: Travel occasionally to support implementations and security-related efforts.
  
  

Education And Qualifications

Master’s degree in cyber or computer science is preferred.

Bachelor’s in cyber security or computer science