Job Description

Director, Cyber Security Engineering

Reporting to the Vice President of Cyber Security Engineering, you will be a part of a global, dedicated multi-disciplinary team of passionate information security and privacy professionals. The Director, Cyber Security Engineering will support a group of teams that protect LNE from cyber risks. This includes security platforms, log management programs, penetration testing, and other security tooling, as well as guiding teams toward improved operational excellence and an enhanced security posture. The Director, Cyber Security Engineering also advocates for security-minded solutions during the evaluation of new tools and processes, as well as provides input on existing workflows and architecture.

What This Role Will Do

• Manage and adapt the growing needs of a global team of security engineers to continuously meet the needs of the business and the Cyber Security program; from both the technical and the professional requirements that arise.
• Create, maintain, and promote sets of standard operating procedures for strategic and operational roadmaps pertaining to the day-to-day as well as long term security operations management.
• Ensure risk management principles are incorporated in new solutions and changes to existing systems, processes, and workflows.
• Implement and maintain defensive security technologies such as SIEM, logging, IDS, vulnerability scanners, and others, for use in threat hunting, incident response, triage analysis, reporting, and documentation.
• Ensure system uptime of a diverse range of operating systems and technologies.
• Develop, grow, and manage a diverse group of engineers tasked with ensuring good cyber security practices.

What This Person Will Bring

• Bachelor's Degree in Computer Science, Information Technology, a closely related discipline, or an information security management certification (CASP, CISSP, CIPM, or equivalent) with at least 7 years of relevant professional experience or relevant work experience.
• 2-4 years of people and team management experience required
• Information Security Certification (Security+, SSCP, GSEC)
• Technology-specific Certifications (AWS, Windows, Linux, Tenable, Zscaler, CrowdStrike, etc.). Agile Project Management Certification (CSM, CSD, or beyond)
• Knowledge to diagnose root cause of issues with security tooling such as vulnerability scanners, IDS, network proxies, SIEM, IAM/PAM, and DNS
• Knowledge to diagnose root cause of issues with AWS's Core Services such as EC2, S3, VPCs, Security Groups, CloudTrail, CloudWatch, CloudFormation, SQS, and IAM
• Knowledge to teach team members to deploy and configure computer operating systems and virtualization, such as Windows, MacOS, Linux, Hypervisors, and Docker
• Knowledge of networking concepts such as DNS, DHCP, VLANs, CIDR Ranges, Proxies, Firewalls, ACLs, and packet analysis
• Knowledge of endpoint detection and response (EDR) and other tools on the endpoint for security purposes
• Experience with different scripting, programming, and automation techniques such as Ansible, bash, chef, PowerShell, Python, cronjobs, and AWS lambda
• Technical knowledge on computer security operational security, threat actors, attack vectors, vulnerabilities, CVEs, and threat actor techniques
• Experience working with SIEM platforms and log management systems, including concepts such as big data management & analysis, dashboarding, data parsing, log message formatting, and data aggregation
• Working knowledge of encryption, password management, certificates, multi-factor authentication, and other means of keeping data secure both in transit and at rest
• Eagerness not only to learn, but to also teach, new methodologies, tools, and platforms for technical and security operations

Job Tags

Similar Jobs