Director, Cybersecurity Engineering

USAA•San Antonio, TX

1d•$164,780 - $314,960•Hybrid

About The Position

The Director, Cybersecurity Engineering leads the engineering organization responsible for the technology foundation supporting USAA's Cyber Threat Operations Center (CTOC). The role is accountable for strategy, engineering, delivery, modernization, reliability, and lifecycle management of cybersecurity platforms, infrastructure, applications, integrations, and automation supporting Endpoint Protection, Vulnerability Management, ASPM, SIEM, SOAR, and SSPM. The director will help shape next-generation cyber defense capabilities, including AI Security, Agentic SOC, Continuous Threat Exposure Management (CTEM), and increased security-operations automation. The position owns strategic security capabilities and multi-year roadmaps, establishes domain strategy and governance, and ensures compliant execution of policies, standards, procedures, and risk-management practices. It directs enterprise security-domain operations, including capacity, resilience, and dependability; partners with Cyber Threat Operations, the CISO, senior leaders, and external regulators; and oversees continuous monitoring, governance, and assurance. The director also manages organizational finances, staffing, and workforce development, and ensures business risks are identified, measured, monitored, and controlled. This role is based in San Antonio, Texas, and requires working in the office four days per week. Relocation assistance is available. USAA does not provide visa sponsorship for this role.

Requirements

Bachelor's degree in Information Security, Information Technology, Computer Science, Business Administration, Information Systems/Management, or a related field; alternatively, four years of relevant education and/or experience.
Eight years of related information-security experience in one or more domains, such as cybersecurity, identity and access management, information assurance and governance, operational risk management, or information technology, including significant accountability for projects, programs, processes, or policies.
Three years of direct team-lead, supervisory, or management experience in an information-security or information-technology domain.
Four years researching, designing, or implementing technology, information-security, or cybersecurity solutions in a large financial institution or large-enterprise information-security program, with demonstrated results in compliance with applicable federal, state, and regulatory policies, standards, and guidelines.
Expert knowledge of relevant risk-management and information-security regulations and standards, such as FFIEC, Gramm-Leach-Bliley, the FFIEC Cybersecurity Assessment Tool, the NIST Cybersecurity Framework, and PCI DSS.
Strong knowledge of security technologies, including cryptography, authentication, authorization, and controls.
Strong knowledge of IT risks and experience implementing security solutions.
Knowledge of threats, vulnerabilities, attack methods, and countermeasures for web-based applications, networks, and cybersecurity solutions.
Demonstrated financial acumen, including budgeting, forecasting, and budget execution for an information-security, cybersecurity, or technology-support function.
Expert business acumen in business operations, risk management, industry practices, and emerging trends.
Strong written and verbal communication skills, including the ability to explain technical analyses to nontechnical audiences.

Nice To Haves

Ten or more years of progressive experience across cybersecurity, security engineering, security operations, infrastructure engineering, or related technology disciplines.
Five or more years of leadership experience managing cybersecurity engineering, platform engineering, security-operations technology, or comparable technical organizations.
Experience leading large-scale cybersecurity platforms and engineering capabilities in mission-critical environments.
Strong technical understanding of Endpoint Security, Vulnerability Management, ASPM, SIEM, SOAR, SSPM, threat detection, incident response, and security automation.
Experience with CrowdStrike Falcon, Qualys, Splunk/Splunk SOAR, or comparable enterprise security technologies.
Experience developing multi-year technology strategies and roadmaps and translating cybersecurity requirements into engineering priorities and investments.
Experience leading technology modernization, platform consolidation, technical-debt reduction, lifecycle management, and complex enterprise integrations.
Working knowledge of AI/ML security, generative AI, agentic technologies, security automation, and AI governance.
Knowledge of CTEM and risk-based approaches to vulnerability and exposure management.
Strong understanding of cloud, APIs, automation, modern software and engineering practices, and security architecture.
Demonstrated ability to lead complex technology transformation while maintaining operational stability of production security services.
Experience with financial management, workforce planning, capacity management, vendor management, and technology-investment prioritization.
Strong executive communication skills, including translating complex engineering and cybersecurity risks into business impact, investment needs, and strategic decisions.
Relevant industry credentials such as CISSP, CISM, GIAC, or comparable cybersecurity or technology certifications.

Responsibilities

Lead the Cybersecurity Engineering organization and its engineering strategy and multi-year technology roadmap for CTOC platforms, infrastructure, applications, and integrations.
Establish engineering standards, platform health metrics, lifecycle practices, capacity management, and operational-readiness expectations to ensure reliability, resiliency, availability, scalability, and recoverability.
Partner with Cyber Threat Operations to translate operational and threat-defense requirements into engineering capabilities and technology investments.
Lead development of next-generation security operations, including AI Security, AI-assisted cyber operations, Agentic SOC capabilities, and CTEM, with appropriate security, governance, architecture, and human oversight.
Own assigned security domains or capabilities, develop multi-year roadmaps, and establish strategic vision, goals, metrics, policies, standards, and procedures.
Direct enterprise information-security domain operations, including capacity, resilience, dependability, and evaluation of how changing conditions affect system operations.
Develop, review, and communicate information-security risk-management policies and procedures with the CISO and senior leaders, taking industry best practices and regulatory requirements into account.
Represent USAA in discussions with external regulators regarding the assigned information-security domain.
Oversee continuous monitoring of cybersecurity activities and alert senior management to potential risks, compliance issues, and operational inefficiencies.
Develop and deliver a sustainable governance and assurance model across multiple domains and the enterprise.
Identify, monitor, and evaluate operational solutions that reduce information-security risk, meet compliance requirements, and improve workforce efficiency, business agility, and scalability.
Promote information-security awareness across the enterprise and external security community.
Manage organizational budgets and staffing as a financial steward, ensuring resources meet organizational needs cost-effectively.
Build and oversee the team through recruiting, development, retention, coaching, performance management, and other managerial activities.
Ensure risks associated with business activities are identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.