Description

.

Key Responsibilities

• Conduct cybersecurity due diligence for mergers and acquisitions (M&A), including security assessments of acquisition targets, identification of technical risks, validation of security controls, and development of integration plans.
• Perform hands-on security assessments across endpoint, identity, network, cloud, and infrastructure environments, validating configurations and security controls.
• Assess and manage endpoint security solutions, including EDR, antivirus, disk encryption, device control, MDM, Group Policy, and endpoint hardening across Windows, macOS, and Linux environments.
• Perform compromise assessments and threat hunting activities, including forensic data collection, security telemetry analysis, identification of Indicators of Compromise (IoCs), endpoint triage, and remediation validation.
• Review and assess network security architecture and configurations, including firewalls, IDS/IPS, web proxies, SSL/TLS inspection, WAFs, VPNs, ZTNA, Citrix environments, and network segmentation.
• Evaluate identity and access management (IAM) controls, including SAML, OAuth, federation, MFA, privileged access management, conditional access, and Zero Trust architectures.
• Assess PKI and certificate management practices, including certificate lifecycle management, certificate authorities, secrets management, TLS hardening, and legacy protocol risks.
• Evaluate email security solutions, including secure email gateways, anti-phishing controls, SPF, DKIM, DMARC, and cloud-based email security platforms.
• Assess SIEM platforms and security telemetry, including log source validation, ingestion requirements, security use cases, logging coverage, and licensing forecasts.
• Collect and validate infrastructure metrics from Active Directory, cloud platforms, CMDBs, endpoint management tools, vulnerability scanners, and SIEM solutions to support integration planning and budget forecasting.
• Work with enterprise security technologies such as CrowdStrike, Zscaler, Splunk, Wiz, and Microsoft security solutions to assess and improve security environments.
• Develop Day 1 and Day 100 cybersecurity integration plans, including security control rationalization, tooling consolidation, migration sequencing, and risk-based remediation prioritization.
• Execute and validate security remediation activities, including security agent deployments, MFA implementation, API security improvements, protocol hardening, and endpoint policy enforcement.
• Collaborate with infrastructure teams, security administrators, target-company personnel, consultants, and acquisition stakeholders to drive security integration initiatives.
• Translate technical findings into executive-level risk assessments, remediation roadmaps, integration runbooks, and budget forecasts for engineering teams and leadership.

Required Qualifications

• 8+ years of experience in cybersecurity engineering, security architecture, incident response, infrastructure security, or enterprise technology integration.
• Extensive experience in cybersecurity due diligence, security assessments, or post-acquisition integration, preferably in M&A environments.
• Strong hands-on expertise across endpoint security, network security, identity and access management, cloud security, and infrastructure security.
• Experience with endpoint detection and response (EDR), SIEM, vulnerability management, threat hunting, and incident response.
• Strong understanding of enterprise security architecture, security controls, Zero Trust, and risk-based remediation.
• Experience with security platforms such as CrowdStrike, Zscaler, Splunk, Wiz, and Microsoft security technologies.
• Proven ability to develop cybersecurity integration strategies, remediation plans, and technical documentation.
• Strong communication and technical leadership skills, with the ability to collaborate across engineering teams and present complex security findings to executive stakeholders

Key Skills

Education

Bachelor's degree