Dir Cyber Security Engineering
About The Position
The Director of Cyber Security Engineering leads the strategic vision and implementation of security frameworks, using automation and AI/ML to improve threat detection and response and enable secure digital transformation across hybrid and multi-cloud environments. The role oversees security professionals and collaborates with IT, Architecture, engineering, and business units to protect Optimum’s assets. It leads adoption of Zero Trust Architecture and SASE, cloud security controls and DevSecOps practices, and security for corporate AI/ML initiatives. The Director also leads the Cyber Security Engineering Operations team responsible for running security platforms in production. This includes day-to-day platform availability and performance, a 24x7 on-call model, incident escalation, controlled platform changes, patching and upgrades, certificate and key lifecycle operations, configuration baselines, runbooks and disaster recovery, automation, operational metrics, audit support, vendor relationships, and capacity planning.
Requirements
- 15+ years of cybersecurity leadership experience, including network and cloud security or related field experience.
- Experience with AWS, Azure, and GCP security controls.
- Expertise in Zero Trust, SASE, CASB, CSPM, CWPP, NDR, AI/ML Security, WAF, and firewalls.
- Proven experience using automation best practices to drive efficiencies and cost savings.
- Strong understanding of security protocols, cryptography, authentication, and authorization.
- Proven ability to lead cross-functional teams and manage complex projects.
- Experience leading security engineering operations teams in a 24x7 production environment, including on-call and change management practices.
- Excellent communication and stakeholder engagement skills.
- Applicants must be authorized to work for any employer in the United States; visa sponsorship is not provided.
Nice To Haves
- Bachelor’s degree in computer science, cybersecurity, or a related field is preferred; related field experience is also cited.
- Master’s degree preferred.
- Relevant certifications are a plus, including CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer, or GCP certifications.
Responsibilities
- Develop and execute a comprehensive cybersecurity strategy aligned with business objectives.
- Oversee security platform engineering for VPAM/PKI, key management/HSM, log pipelines, DDoS, WAF, remote access, and network firewalls.
- Engineer and operate DDoS scrubbing and runbooks; maintain authoritative DNSSEC and WAF hygiene for customer-facing properties; coordinate policy distribution with backbone automation and orchestration.
- Lead adoption of Zero Trust Architecture and SASE across enterprise and cloud environments.
- Enforce Secure by Design guardrails for cloud and AI workloads, including data boundaries, private tenancy, and model and prompt protections.
- Enforce software supply chain vendor security management using Zero Trust Networking concepts.
- Oversee CSPM and CWPP tools.
- Collaborate with DevOps teams to embed and maintain security in CI/CD pipelines for cloud deployments.
- Use AI/ML-driven practices to improve cybersecurity posture, threat detection, response times, and secure digital transformation.
- Enhance security for corporate AI/ML initiatives, protect sensitive data, and support resilient systems that maintain trust and compliance.
- Lead the Cyber Security Engineering Operations team and own the day-to-day operation, availability, and performance of enterprise security platforms.
- Establish and maintain a 24x7 security engineering on-call model with escalation paths and service levels for platform incidents and customer-impacting events.
- Serve as the Tier 3 engineering escalation point for the Security Operations Center during active incidents, including emergency blocks, rule changes, and DDoS mitigation.
- Manage firewall, WAF, and proxy security policy and rule changes through request, peer review, testing, and enterprise change management records.
- Drive patching, upgrades, and end-of-life replacement of security infrastructure to maintain supported and hardened versions.
- Oversee certificate and key lifecycle operations, including issuance, renewal, revocation, and expiration monitoring.
- Maintain platform configuration baselines and monitor configuration drift, unauthorized changes, and unused or overly permissive rules.
- Develop and update operational runbooks, standard operating procedures, and disaster recovery plans; regularly test failover.
- Automate routine operational tasks such as rule provisioning, health checks, and reporting.
- Track and report platform uptime, change success rate, mean time to restore, and ticket backlog to security leadership.
- Provide audit evidence and support control testing for PCI, SOX, and other regulatory and internal requirements related to security platform operations.
- Manage vendor support relationships, maintenance contracts, and license renewals for security engineering tools.
- Coordinate security platform capacity planning with network and cloud engineering in advance of traffic growth and new service launches.
Stand Out From the Crowd
Upload your resume and get instant feedback on how well it matches this job.
What This Job Offers
Job Type
Full-time
Career Level
Director
