Cybersecurity Engineering & Operations Director

Key Responsibilities:

• Develop and execute the cybersecurity engineering and operations strategy with the VP, Compliance and Security, translating risk and business priorities into technical roadmaps, architecture standards, and measurable outcomes (e.g., remediation performance, control coverage, incident response effectiveness, attack surface and posture trends).

• Lead the design and continuous improvement of security controls and guardrails across AWS and corporate environments, including cloud identity, network, workload, container/Kubernetes, and data protections, with security automation delivered as code (Terraform, Python, CI/CD, policy-as-code).

• Own technical security operations and incident response: detection, investigation, containment, eradication, and recovery; maintain and exercise IR plans, playbooks, and runbooks; build automated detection and response workflows across SIEM, SOAR, EDR, and cloud-native tooling; and coordinate executive, legal, and regulatory escalation with the VP.

• Own the vulnerability and exposure management program across applications, cloud, endpoints, and external attack surfaces, setting risk-based remediation SLAs and prioritizing by exploitability, exposure, and business impact while driving root-cause fixes for systemic weaknesses.

• Provide security leadership for Microsoft 365 and Entra ID (MFA, Conditional Access, privileged identity management, Just-In-Time access), corporate endpoint and email security, and for application and product security across the SDLC, including SAST/DAST/SCA, SBOMs, API security, threat modeling, a security champions program, and AI-enabled applications and integrations.

• Lead, mentor, and develop the cybersecurity manager, engineers, and security operations staff; define team structure, career paths, and operating processes that scale; manage security vendors, penetration testing, and managed security services; and serve as senior technical security advisor to Engineering, IT, Product, and executive leadership.