Description

Lead cybersecurity initiatives and risk management for complex networked environments. Own the security lifecycle from design to remediation.

Responsibilities

• Perform organization-wide cybersecurity risk analysis and maintain a comprehensive risk register.
• Design and implement security controls, including network architecture diagrams and high/low-level design documents.
• Translate compliance requirements into specific security controls and present compensating measures to leadership.
• Analyze vulnerabilities and collaborate with Application Development, IT, and Systems teams to ensure timely remediation.
• Conduct threat simulations covering network perimeter, identity management, API security, and microservices design.

Required Skills

• 12+ years of experience in information security.
• 8+ years in IT infrastructure management, application architecture, risk management, and IT operations.
• 8+ years working with networking, load-balancing, DNS, TLS/SSL, SAML, SSO, Kerberos, and MFA.
• 4+ years of experience in cloud environments including Azure, AWS, or GCP.
• 4+ years securing internet-facing applications using WAF and reverse-proxy technologies such as Akamai, CloudFlare, Azure FrontDoor, or AWS CloudFront.
• Proficiency with Python, Bash, and Powershell.
• Experience managing Windows and Linux environments.

Preferred Skills

• Bachelor's degree in Computer Science, Information Systems, or equivalent work experience.

Key Skills

Education

Bachelor's degree in Computer Science, Information Systems