Lead Cybersecurity Specialist

Legence • Minneapolis, MN

32d • $125,000 - $165,000 • Remote

About The Position

The Lead Cybersecurity Specialist within Legence’s IT Security organization will help advance the company’s overall security posture. The role includes operational support, security architecture, risk strategy, and cross-functional leadership. The specialist will work with other IT pillars and team members to implement and continuously improve controls that protect enterprise systems, cloud environments, and data against evolving threats while aligning with business objectives and regulatory requirements. The role also provides leadership and career-development support to junior team members.

The specialist will lead a team of cyber analysts focused on advancing Legence’s security posture and reducing risk. The position supports the integrity, reliability, and security of IT systems and processes, with an emphasis on ITGC audits, security tool selection, continuous improvement, and cross-functional project management. The position is remote within the United States; proximity to a Legence office is preferred.

Requirements

• Bachelor’s degree in Computer Science, Information Security, or a related field, or equivalent experience.
• 5–10+ years of cybersecurity experience, with demonstrated progression into senior or lead responsibilities.
• Deep expertise in cloud security, network security, and enterprise security architecture.
• Strong experience with security technologies such as SIEM, EDR, IDS/IPS, firewalls, and encryption.
• Proven experience in risk management, incident response, and vulnerability management.
• Proficiency in scripting or programming for automation and security engineering, such as Python, PowerShell, or Bash.
• Experience with security frameworks and compliance standards such as NIST, ISO 27001, and CIS.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent communication skills and ability to influence technical and non-technical stakeholders.
• Current U.S. work authorization; visa sponsorship is not available.

Nice To Haves

• Industry certifications such as CISSP, CISM, CCSP, or GIAC.
• Experience leading security initiatives or small teams.

Responsibilities

• Ensure the implementation and governance of secure cloud architectures across platforms.
• Develop, enforce, and govern cybersecurity controls, including identity, access management, and workload protection.
• Partner with engineering teams to embed security into cloud-native development and DevOps processes (DevSecOps).
• Evolve the organization’s security risk management program.
• Conduct risk assessments, threat modeling, and control evaluations.
• Translate technical risks into business impact and present recommendations to senior leadership.
• Develop and maintain automation frameworks and scripts to improve detection, response, and compliance capabilities.
• Lead integration of security tooling, including SIEM, EDR, and CSPM, into a cohesive security ecosystem.
• Oversee monitoring and detection strategies across networks, endpoints, and cloud environments.
• Lead incident response, including triage, containment, root cause analysis, and post-incident improvements.
• Improve detection use cases and response playbooks.
• Lead the vulnerability management lifecycle, including scanning, prioritization, and remediation strategies.
• Coordinate penetration testing and adversary simulations.
• Provide expert guidance on remediation and risk prioritization.
• Support and help shape governance, risk, and compliance initiatives, including NIST, ISO, and SOC 2.
• Lead security assessments, audits, and third-party risk reviews.
• Contribute to long-term cybersecurity strategy, roadmap planning, and security metrics reporting.
• Mentor junior analysts and engineers and serve as an escalation point.
• Oversee the career development of security team members.
• Collaborate with IT, engineering, and business stakeholders to align security initiatives with organizational goals.
• Monitor emerging threats, technologies, and industry trends and bring proactive recommendations to leadership.

Benefits

• 401(k) plan with company match of dollar-for-dollar contributions up to 4% of eligible pay, with immediate vesting.
• Employer-provided medical, dental, vision, and prescription drug benefits.
• Employee Assistance Program and accident and illness coverage.
• Employer-provided basic life insurance and AD&D valued at $50,000, with voluntary buy-up options for additional coverage.
• Flexible non-accrual vacation.
• Company holidays per policy.
• Business travel and related expenses reimbursed per company policy.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior