Vice President, Cyber & Network Security Engineer

CLS-Group•Iselin, NJ

3d•Hybrid

About The Position

The Vice President, Cyber & Network Security Engineer is a senior, hands-on technical engineering role in CLS’s CISO department. The role leads the deployment, automation, and operational support of enterprise security platforms and controls. It includes building AWS-based environments to evaluate and test security technologies, designing and operationalizing new security solutions, engineering off-the-shelf tools, and mentoring junior engineers. The position is based in Iselin, New Jersey, and reports to the Cyber & Network Security Engineering Lead. The engineer designs, builds, configures, and maintains enterprise security platforms; develops Python automation and Infrastructure-as-Code capabilities; and supports secure AWS environments from proof-of-concept through production. The role also develops monitoring and detection capabilities, onboards log sources, and deploys and manages Data Loss Prevention solutions. The engineer works with infrastructure engineering, cyber defense, data owners, security architects, and the wider engineering community to deliver secure-by-design solutions and measurable improvements in security operations. Success includes engineering and onboarding security technologies, increasing automation and reducing manual work, improving monitoring and detection, maintaining stable and secure AWS-hosted security infrastructure, and delivering initiatives aligned with business and security objectives. CLS offers hybrid working, flexible working where possible, and a range of employee benefits and development opportunities.

Requirements

At least 5 years of experience in security engineering, cloud security engineering, or infrastructure security.
Experience mentoring and leading junior engineers.
Experience working across engineering and architecture groups to deliver solutions that are secure from the ground up.
Experience building and deploying AWS environments from the ground up.
Hands-on experience onboarding, configuring, and operating enterprise security platforms.
Strong experience automating security operations using Python.
Experience supporting security technology evaluations, proof-of-concepts, and production rollouts.
Knowledge of AWS, Infrastructure-as-Code concepts, Linux and Windows administration, and networking fundamentals, including TCP/IP, DNS, HTTP/S, routing, and proxies.
Experience with Splunk, Forcepoint, Zscaler, Microsoft Purview, Qualys VMDR, or related security tools and technologies is relevant to the role; the posting notes these products are not all essential.
Knowledge of SIEM, Endpoint Detection and Response, DLP, and vulnerability management technologies.
Knowledge of SPL, REST APIs, automation frameworks, scripting and orchestration, and CI/CD concepts.
Experience in security or cyber engineering in complex, regulated environments; markets technology, investment banking, or financial market infrastructure experience is strongly preferred.
Proven ability to deliver large-scale security platforms end-to-end, including multi-system integration.
Ability to work deeply on architecture, automation, telemetry, and operational resilience.
Strategic thinking and the ability to translate vision into execution.
Strong communication and collaboration skills across an organization.
Data-driven, outcome-focused approach with an emphasis on measurable security improvements.
Comfort operating in fast-paced, evolving environments.
Experience working in highly regulated operations and complex organizational structures.
Experience reporting to senior leadership and supporting executive-level decision-making and prioritization.
Experience engaging in complex governance and contributing to multi-layered committees or forums.
Ability to understand, interpret, and apply regulatory requirements, compliance obligations, and industry standards.
Strong troubleshooting and problem-solving skills, an engineering mindset, and a desire to learn new technologies.

Nice To Haves

AWS Solutions Architect, Security Specialty, or equivalent certification.
Splunk Power User, Admin, or Architect certification.
CrowdStrike Certified Falcon Administrator certification.
Experience with Terraform or CloudFormation.
Experience with Ansible or SCCM.
Experience with Splunk Enterprise or Splunk Cloud, Forcepoint Web Security, Forcepoint Email Security and DLP, Zscaler DLP and Internet Access, Microsoft Purview DLP, Qualys VMDR, and CrowdStrike Falcon.
Experience in markets technology, investment banking, or financial market infrastructure.

Responsibilities

Design, build, configure, and maintain enterprise security platforms and services.
Troubleshoot platform, infrastructure, and integration issues across security ecosystems.
Work with infrastructure engineering to ensure security is engineered into infrastructure solutions.
Provide senior technical leadership and guidance to the wider engineering community, and mentor junior engineers.
Build and manage AWS environments for proof-of-concepts, product evaluation, security testing, and production deployments.
Develop repeatable Infrastructure-as-Code capabilities for rapid deployment of security tooling.
Engineer secure AWS architectures using services and components including EC2, VPCs, Security Groups, IAM, Route 53, S3, Lambda, CloudWatch, GuardDuty, and AWS Organizations.
Support secure cloud adoption initiatives and platform modernization programs.
Develop Python automation to reduce operational effort and improve security effectiveness.
Create and maintain scripts, APIs, orchestration workflows, and automation frameworks for deployment, configuration management, monitoring and alerting, compliance validation, asset discovery, data collection, and reporting.
Integrate security tooling with enterprise workflows and operational platforms.
Design and implement security monitoring use cases; onboard log sources; and develop Splunk searches, correlation rules, dashboards, and reports.
Improve threat detection through security telemetry integration and log onboarding.
Partner with Cyber Defense teams to improve detection engineering and incident response capabilities.
Deploy and manage enterprise Data Loss Prevention solutions, including configuring and optimizing Forcepoint, Microsoft Purview, and Zscaler DLP.
Work with data owners and security architects to implement controls that protect sensitive information.
Collaborate with senior engineers and architects to deliver secure-by-design solutions.
Support security technology roadmaps and strategic initiatives.
Deliver security technologies from design and build through operation, including large-scale platforms and multi-system integrations.
Apply regulatory requirements, compliance obligations, and industry standards in security engineering work.

Benefits

23 holiday days for US employees.
2 paid volunteer days.
Generous parental leave policies.
Parental transition coaching programmes and support services.
Wellbeing and mental health support resources.
Hybrid working and flexible working where possible.
Monthly company-wide Heads Down Days with no meetings.
401K match for US employees.
Private medical insurance and dental coverage.
Social events.
Annual flu vaccinations.
Discounted gym membership and a discount/sweat equity program for US employees.
Access to Discover, a learning platform with more than 1,000 courses from LinkedIn Learning.
Frequent development sessions.
Employee Networks, including the Women’s Forum, Black Employee Network, and Pride Network.