Archived listing. The details below describe a past opening.
Required Skills & Experience
Must-Haves
- 6+ years of Information Security experience with a broad enterprise security background.
- Experience architecting and implementing security solutions across cloud, SaaS, and enterprise environments.
- Strong knowledge of security operations, including SIEM, IDS/IPS, firewalls, vulnerability management, incident response, and threat detection.
- Hands-on SIEM experience, preferably with Splunk.
- Deep cloud security experience, specifically within AWS, Azure, Microsoft 365, and Entra ID environments.
- Working knowledge of scripting/coding, preferably Python or Perl, including the ability to read and understand automation scripts.
- Experience evaluating, onboarding, and securing third-party/SaaS vendors.
- Experience managing vendor relationships and security service providers (MSSPs).
- Strong Unix/Linux administration experience.
- Strong communication and stakeholder management skills with the ability to work cross-functionally and present to leadership. Prior people leadership, mentoring, or management experience, as this person may help fill leadership responsibilities currently handled by Team
Nice to Have Skills & Experience
Plusses
- Experience with CrowdStrike, Darktrace, and/or Tripwire.
CISSP, CISM, CCSP, CISA, and/or GIAC certifications.
Job Description
Day-to-Day:
This role is a senior-level Enterprise Information Security Engineer/Architect responsible for owning and advancing the organization's overall security posture across cloud, SaaS, and on-prem infrastructure. On a daily basis, they will design and implement secure enterprise architectures, monitor and respond to security events, conduct risk assessments and threat modeling, manage security tools and vendors, and drive compliance initiatives. The individual will partner closely with infrastructure, application, and business teams to ensure security is embedded into all technology decisions while also serving as a strategic advisor to leadership. This person will help lead security operations, oversee third-party/vendor security reviews, support audits and remediation efforts, and educate employees on cybersecurity best practices. The ideal candidate is a broad, hands-on security professional with strong communication skills who can operate as a technical leader and trusted partner to the EISO.