Lead Cybersecurity

AT&T•Plano, TX

7h•$187,200 - $237,400•Onsite

About The Position

Responsible for cyber security areas across products, services, infrastructure, networks, and/or applications while providing protection for AT&T, our customers and our vendors/partners. Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks. Supports innovation, strategic planning, technical proof of concepts, testing, lab work, and various other technical program management related tasks associated with the cyber security programs. Includes ideation, testing, proof of concept and support for various cyber related projects. Analysis, of complex security issues and the development and engineering activities to help mitigate risk. Analyzes various hardware and/or software solutions recommending purchases and identifying modifications to fit AT&Ts cyber security needs and that of our managed services teams. Develops policies and procedures to minimize network intrusion, malware events and vulnerability issues for internal and external customers. Applies measures to block malicious code and applications. Includes forward looking research, planning and strategy to strengthen our stance against future cyber security threats and enhance our mitigation techniques and technology solutions. Areas of work in this area include, but are not limited to: Cyber Incident Response, cyber product testing, cyber risk & strategic analysis, cyber research, cyber awareness & training, cyber vulnerability detection & assessment, cyber intelligence & investigation, cyber networks & systems engineering, cyber security application testing, cyber digital forensics & forensics analysis, cyber software assurance, cyber application development & testing, cyber IoT planning & testing, cyber policy & requirements & standards. Utilize Cloud environments (Microsoft Azure and AWS). Use encryption algorithms, secure protocols, and cryptographic libraries. Utilize complex security challenges with innovative solutions. Employ PKI (Public & Private) architecture, encryption technologies (data at rest, data in transit, structured and unstructured data encryption, TLS protocols, VPN, IPSec), Identity and Access Management (IDM), Key Management (KMS), and Secrets Management systems. Utilize HashiCorp Vault, Oracle Key Vault, and Hardware Security Modules (HSMs) in enterprise environments. Use encryption algorithms, PKI, and certificate lifecycle management. Use scripting languages (Python, Bash) for key rotation and vault integration for secure automation. Configure and maintain high availability and disaster recovery for vault and HSM systems. Use FIPS 140-2/3, PCI DSS, GDPR, and other regulatory frameworks. Conduct security audits, vulnerability assessments, and incident response related to cryptographic systems.

Requirements

Bachelor’s degree, or foreign equivalent degree in Cyber Security, Information Systems, or Applied Computer Science
Five (5) years of progressive, post-baccalaureate experience in the job offered or five (5) years of progressive, post-baccalaureate experience in a related occupation
Utilizing Cloud environments (Microsoft Azure and AWS)
Using encryption algorithms, secure protocols, and cryptographic libraries
Utilizing complex security challenges with innovative solutions
Employing PKI (Public & Private) architecture, encryption technologies (data at rest, data in transit, structured and unstructured data encryption, TLS protocols, VPN, IPSec), Identity and Access Management (IDM), Key Management (KMS), and Secrets Management systems
Utilizing HashiCorp Vault, Oracle Key Vault, and Hardware Security Modules (HSMs) in enterprise environments
Using encryption algorithms, PKI, and certificate lifecycle management
Using scripting languages (Python, Bash) for key rotation and vault integration for secure automation
Configuring and maintaining high availability and disaster recovery for vault and HSM systems
Using FIPS 140-2/3, PCI DSS, GDPR, and other regulatory frameworks
Conducting security audits, vulnerability assessments, and incident response related to cryptographic systems

Responsibilities

Responsible for cyber security areas across products, services, infrastructure, networks, and/or applications.
Provide protection for AT&T, our customers and our vendors/partners.
Works with senior team members on various projects relating to the protection of devices, customers, assets, data, information technology, and networks.
Supports innovation, strategic planning, technical proof of concepts, testing, lab work, and various other technical program management related tasks associated with the cyber security programs.
Includes ideation, testing, proof of concept and support for various cyber related projects.
Analysis of complex security issues and the development and engineering activities to help mitigate risk.
Analyzes various hardware and/or software solutions recommending purchases and identifying modifications to fit AT&Ts cyber security needs and that of our managed services teams.
Develops policies and procedures to minimize network intrusion, malware events and vulnerability issues for internal and external customers.
Applies measures to block malicious code and applications.
Includes forward looking research, planning and strategy to strengthen our stance against future cyber security threats and enhance our mitigation techniques and technology solutions.
Areas of work include: Cyber Incident Response, cyber product testing, cyber risk & strategic analysis, cyber research, cyber awareness & training, cyber vulnerability detection & assessment, cyber intelligence & investigation, cyber networks & systems engineering, cyber security application testing, cyber digital forensics & forensics analysis, cyber software assurance, cyber application development & testing, cyber IoT planning & testing, cyber policy & requirements & standards.
Utilize Cloud environments (Microsoft Azure and AWS).
Use encryption algorithms, secure protocols, and cryptographic libraries.
Utilize complex security challenges with innovative solutions.
Employ PKI (Public & Private) architecture, encryption technologies (data at rest, data in transit, structured and unstructured data encryption, TLS protocols, VPN, IPSec), Identity and Access Management (IDM), Key Management (KMS), and Secrets Management systems.
Utilize HashiCorp Vault, Oracle Key Vault, and Hardware Security Modules (HSMs) in enterprise environments.
Use encryption algorithms, PKI, and certificate lifecycle management.
Use scripting languages (Python, Bash) for key rotation and vault integration for secure automation.
Configure and maintain high availability and disaster recovery for vault and HSM systems.
Use FIPS 140-2/3, PCI DSS, GDPR, and other regulatory frameworks.
Conduct security audits, vulnerability assessments, and incident response related to cryptographic systems.

Benefits

Medical/Dental/Vision coverage
401(k) plan
Tuition reimbursement program
Paid Time Off and Holidays (based on date of hire, at least 23 days of vacation each year and 9 company-designated holidays)
Paid Parental Leave
Paid Caregiver Leave
Additional sick leave beyond what state and local law require may be available but is unprotected
Adoption Reimbursement
Disability Benefits (short term and long term)
Life and Accidental Death Insurance
Supplemental benefit programs: critical illness/accident hospital indemnity/group legal
Employee Assistance Programs (EAP)
Extensive employee wellness programs
Employee discounts up to 50% off on eligible AT&T mobility plans and accessories, AT&T internet (and fiber where available) and AT&T phone