Director of Information Security Engineering

📋 Description

• • Lead and mentor a team of information security engineers, fostering a culture of technical excellence and continuous improvement in the realm of cybersecurity.
• • Conduct in-depth risk analyses of identified security issues and events, meticulously investigating multiple security tools and logs to uncover critical facts without requiring direct supervision.
• • Proactively monitor, test, and enhance existing security practices across network, system, application, and operational management domains, ensuring robust protection against evolving threats.
• • Provide expert consultation and support to engineering teams for vulnerability identification and remediation, acting as a key resource in strengthening the organization's security posture.
• • Oversee and manage critical vendor relationships, ensuring timely security system updates, effective technical support, and successful execution of Proofs of Concept (POCs) for new security projects.
• • Identify and champion opportunities for process improvement and automation within the information security function, driving greater efficiency and reinforcing security measures with minimal oversight.
• • Serve as a crucial liaison and support resource for Security Operations Center (SOC) analysts, offering guidance and expertise with limited or no direction.
• • Participate actively in an on-call rotation, providing critical support during off-hours to address and mitigate security incidents.
• • Lead and contribute to the evaluation, analysis, and implementation of new security tooling, including conducting thorough proof-of-concept evaluations and ensuring seamless integration.
• • Review, analyze, and respond promptly to phishing (abuse) submissions and security alerts, employing a keen eye for detail and a proactive approach to threat detection.
• • Provide essential support and documentation for audits, regulatory examinations, and security assessments, ensuring compliance and demonstrating adherence to industry standards.
• • Gather and present information necessary for tracking, communicating, and improving key Information Security team metrics and reports, enabling data-driven decision-making.
• • Proactively identify potential gaps and weaknesses in the organization's security posture, influencing stakeholders to adopt strategies that reduce the likelihood and impact of security risks.
• • Collaborate effectively with IT and business partners to embed security considerations into the entire lifecycle of hardware, software, and infrastructure evaluation, selection, installation, and configuration.
• • Undertake and complete other related activities and projects as required, demonstrating flexibility and a commitment to the overall success of the information security program.
• • Thrive in a fully remote working environment, actively participating in virtual meetings through webcam and verbal communication, and contributing to a collaborative team dynamic.
• • Leverage a strong understanding of diverse computing environments, including AWS, to implement and manage security solutions effectively with minimal supervision.
• • Apply a broad knowledge of computer and information security topics, encompassing networking, database management, application and infrastructure security, vulnerability management, identity and access management, and Infrastructure as Code (IaC) concepts.
• • Demonstrate a commitment to AI fluency by actively embracing and integrating AI tools and technologies to enhance individual and team performance, improve decision-making processes, and drive innovation in security strategies.
• • Possess a deep understanding of common cybersecurity vulnerabilities and their effective mitigation techniques.
• • Exhibit a strong grasp of data protection principles and secure data movement practices.
• • Independently solve complex computer-related issues, demonstrating strong analytical and problem-solving skills.
• • Understand and apply DevOps practices and Agile methodologies to security engineering workflows.
• • Maintain a solid understanding of Identity and Access Management (IAM) concepts, with a preference for AWS IAM expertise.
• • Effectively manage multiple complex assignments concurrently, showcasing excellent organizational and time management skills.
• • Demonstrate proficiency in coding and/or scripting concepts across multiple languages.
• • Possess a solid understanding of architectural concepts relevant to secure system design.
• • Communicate effectively, both verbally and in writing, with team members and senior leadership, articulating complex security concepts clearly and concisely.
• • Work collaboratively and productively with colleagues in a fully remote setting.
• • Exhibit strong time management skills to prioritize tasks and meet deadlines effectively.