Director, Security Engineering & Architecture

Lennar•Waterford, FL

About The Position

The Director, Cybersecurity, reporting to the VP of Cybersecurity, is a hands-on security leader within Lennar's Enterprise Security Office (ESO), accountable for the strategy, delivery, and operational excellence of an assigned cybersecurity function. The leader sets the function's vision, structure, and culture; works across business and technology organizations to reduce risk; and uses AI and automation to modernize security delivery. In this specialization, the Director leads Lennar's Security Engineering & Architecture function, owning engineering strategy and delivery of security capabilities across Lennar's hybrid, multi-cloud environment. The role shapes security architecture and supports the secure adoption of AI. It partners with enterprise architecture, AI Engineering, data, platform, DevOps, and application engineering teams, as well as Security Operations, Identity & Access Management, and Governance, Risk & Compliance. The position is primarily sedentary and office-based. It requires the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 pounds; finger dexterity is necessary. Responsibilities and activities may change at any time, with or without notice.

Requirements

At least 5 years of experience across security or technology disciplines, including at least 3 years in technology leadership and experience overseeing multiple teams.
Proven experience building and leading multiple high-performing security teams.
Strong background across information security domains and familiarity with security frameworks and regulations, such as NIST CSF.
Practical experience applying AI/ML and generative AI to real security problems.
Experience managing budgets, vendor relationships, and contractor or managed service resources.
Ability to influence senior stakeholders and communicate complex security topics to executive, business, and technical audiences.
Bachelor's or Master's degree in Computer Science, Engineering, Information Systems, or a related discipline; equivalent experience may be considered in lieu of a degree.
Demonstrated experience defining and implementing enterprise security architecture across AWS, Azure, or GCP, spanning IaaS, PaaS, and SaaS models in hybrid and multi-cloud environments.
Hands-on experience with modern software architecture, microservices/API-based development, infrastructure-as-code, scripting, and security tooling development, with technical depth to guide engineering decisions.
Deep experience embedding security into DevSecOps practices, CI/CD pipelines, and Agile/Scrum delivery models.
Strong background in application security, infrastructure and cloud security, zero trust, data protection, and vulnerability management.
Working knowledge of securing AI systems and familiarity with relevant frameworks such as the OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, or MITRE ATLAS.

Nice To Haves

Relevant certifications such as CISSP or CISM.
Engineering and architecture certifications such as CCSP, CCSK, SABSA, TOGAF, or cloud vendor-specific security credentials.

Responsibilities

Lead an assigned cybersecurity function, setting its vision, structure, and culture and leading multiple teams through managers and senior technical leads.
Own the function's roadmap, aligned with ESO strategy, enterprise architecture standards, the Lennar Technology Group roadmap, and company risk priorities.
Drive AI and automation adoption within the function to reduce manual work, increase delivery speed, and improve security outcomes.
Own delivery execution, including prioritization, resourcing, budget management, and oversight of vendors, contractors, and managed services.
Define and report metrics to drive accountability and communicate security posture and progress to senior leadership.
Partner with ESO peers and business and technology leaders to translate business needs into secure, scalable solutions and influence senior leadership decisions.
Recruit, mentor, and develop managers and individual contributors, building talent and an inclusive culture across a geographically distributed organization.
Own the multi-year security engineering roadmap and partner with enterprise architecture and domain architects to shape Lennar's security architecture.
Apply AI and automation, including agentic workflows, LLM-powered tooling, AI-assisted code review, and intelligent process automation, to security engineering workflows such as threat detection, vulnerability management, security testing, and incident response.
Partner with AI Engineering, enterprise architecture, data, and platform teams on enterprise AI adoption, contributing security requirements, guardrails, and reference patterns for risks such as sensitive data exposure, prompt injection, model and supply chain integrity, and identity and access for AI agents.
Partner with DevOps, platform, and application engineering leaders to embed security into CI/CD pipelines and the software development lifecycle, promoting shift-left practices, automated security gates, and secure-by-default reference architectures.
Establish and govern security engineering standards, reference architectures, reusable patterns, and internal tooling; partner with enterprise architecture to review new and changing solutions.
Lead enterprise vulnerability management and security review programs, using data-driven, risk-based prioritization to focus engineering effort on high-risk exposures.
Collaborate with Security Operations, Identity & Access Management, and Governance, Risk & Compliance to translate security strategy and standards into engineered controls and measurable outcomes.
Evaluate, select, and operationalize security technologies and vendors, particularly AI-native and automation-first solutions, and drive platform rationalization to improve effectiveness and total cost of ownership.
Track engineering health and security posture metrics, including deployment frequency, mean time to remediate, automation coverage, control coverage, and security debt.