Lead Security Engineer

Thomson Reuters•Frisco, TX

1d•$118,400 - $219,800•Hybrid

About The Position

Thomson Reuters is establishing a dedicated security engineering capability and is seeking a hands-on technical lead to help build and shape it. This role involves setting the technical direction for securing a global business's infrastructure at scale, designing security end-to-end across application, cloud, and infrastructure estates, including on-premises data centers and major clouds. It is a senior individual-contributor role focused on technical leadership and process design, not line management. The position sits on the Service Management & Transformation team and requires partnering across Information Security, Platform Engineering, and application teams to enhance the overall security posture.

Requirements

8+ years of hands-on experience in security engineering, vulnerability management, or cloud and infrastructure security.
Experience as a technical lead or senior individual contributor setting direction and guiding the technical work of other engineers.
Bachelor's degree in Computer Science, Information Security, or a related field (or equivalent practical experience).
Deep understanding of security principles, common vulnerabilities, and best practices across application, cloud, and infrastructure layers.
Working command of vulnerability management at scale, including prioritization frameworks, CVSS/EPSS, CISA KEV, and SLA-driven burndown.
Breadth across the security stack: application and dependency vulnerabilities, infrastructure patching, guardrails, WAF, network isolation, and identity and access controls.
Multi-cloud experience across two or more of AWS, Azure, GCP, and OCI (all four an advantage) alongside on-premises infrastructure.
Track record of designing and improving technical processes (e.g., patching cycles, image refreshes, remediation workflows).
Proactive mindset for identifying and closing security gaps through automation and tooling.
Strong judgment on balancing risk reduction against operational and customer impact.
Excellent written and verbal communication skills, comfortable operating across security, engineering, and business audiences.
Ability to convey complex security concepts to technical and non-technical stakeholders.
Enthusiasm for collaborating with cross-functional teams to build secure, reliable systems that scale globally.

Nice To Haves

Experience with AI-assisted or automated security tooling is an advantage.

Responsibilities

Act as the technical lead for security across application, cloud, and infrastructure, setting technical direction and owning the security backlog.
Serve as the point of escalation for complex security and remediation work.
Design and build security controls across operating systems, container orchestration, CI/CD pipelines, cloud configuration, and network boundaries.
Design new security processes and ways of working, revamping patching cycles and golden-image/base-image refreshes.
Identify areas for improvement in security and remediation processes, propose better approaches, and establish them as team standards.
Set the technical approach for application and open-source dependency fixes, infrastructure patching, cloud configuration and guardrails, WAF, network isolation, and secrets and machine-identity management.
Prioritize security efforts based on risk, industry best practices (e.g., CISA guidance), and SLA-driven burndown.
Champion the adoption of AI-augmented security tooling, including SAST and SCA.
Review fixes and mentor engineers to raise the technical bar.
Coordinate with the wider security team across regions to align standards and priorities.
Own clear reporting and metrics.
Build runbooks, standards, and escalation paths to ensure security is a repeatable, auditable capability.

Benefits

Flexible hybrid working environment
Flex My Way policies supporting personal and professional responsibilities
Work from anywhere for up to 8 weeks per year
Career Development and Growth opportunities
Grow My Way programming
Skills-first approach
Flexible vacation
Two company-wide Mental Health Days off
Access to the Headspace app
Retirement savings
Tuition reimbursement
Employee incentive programs
Resources for mental, physical, and financial wellbeing
Globally recognized, award-winning reputation for inclusion and belonging
Two paid volunteer days off annually
Opportunities to get involved with pro-bono consulting projects and ESG initiatives
Market competitive health, dental, vision, disability, and life insurance programs
Competitive 401k plan with company match
Competitive vacation, sick and safe paid time off
Paid holidays
Parental leave
Sabbatical leave
Optional hospital, accident and sickness insurance paid 100% by the employee
Optional life and AD&D insurance paid 100% by the employee
Flexible Spending and Health Savings Accounts
Fitness reimbursement
Access to Employee Assistance Program
Group Legal Identity Theft Protection benefit paid 100% by employee
Access to 529 Plan
Commuter benefits
Adoption & Surrogacy Assistance
Access to Employee Stock Purchase Plan