Security Director Jobs

About The Position

Requirements

• 15+ years of cybersecurity leadership experience, including network and cloud security or related field experience.
• Experience with AWS, Azure, and GCP security controls.
• Expertise in Zero Trust, SASE, CASB, CSPM, CWPP, NDR, AI/ML Security, WAF, and firewalls.
• Proven experience using automation best practices to drive efficiencies and cost savings.
• Strong understanding of security protocols, cryptography, authentication, and authorization.
• Proven ability to lead cross-functional teams and manage complex projects.
• Experience leading security engineering operations teams in a 24x7 production environment, including on-call and change management practices.
• Excellent communication and stakeholder engagement skills.
• Applicants must be authorized to work for any employer in the United States; visa sponsorship is not provided.

Nice To Haves

• Bachelor’s degree in computer science, cybersecurity, or a related field is preferred; related field experience is also cited.
• Master’s degree preferred.
• Relevant certifications are a plus, including CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer, or GCP certifications.

Responsibilities

• Develop and execute a comprehensive cybersecurity strategy aligned with business objectives.
• Oversee security platform engineering for VPAM/PKI, key management/HSM, log pipelines, DDoS, WAF, remote access, and network firewalls.
• Engineer and operate DDoS scrubbing and runbooks; maintain authoritative DNSSEC and WAF hygiene for customer-facing properties; coordinate policy distribution with backbone automation and orchestration.
• Lead adoption of Zero Trust Architecture and SASE across enterprise and cloud environments.
• Enforce Secure by Design guardrails for cloud and AI workloads, including data boundaries, private tenancy, and model and prompt protections.
• Enforce software supply chain vendor security management using Zero Trust Networking concepts.
• Oversee CSPM and CWPP tools.
• Collaborate with DevOps teams to embed and maintain security in CI/CD pipelines for cloud deployments.
• Use AI/ML-driven practices to improve cybersecurity posture, threat detection, response times, and secure digital transformation.
• Enhance security for corporate AI/ML initiatives, protect sensitive data, and support resilient systems that maintain trust and compliance.
• Lead the Cyber Security Engineering Operations team and own the day-to-day operation, availability, and performance of enterprise security platforms.
• Establish and maintain a 24x7 security engineering on-call model with escalation paths and service levels for platform incidents and customer-impacting events.
• Serve as the Tier 3 engineering escalation point for the Security Operations Center during active incidents, including emergency blocks, rule changes, and DDoS mitigation.
• Manage firewall, WAF, and proxy security policy and rule changes through request, peer review, testing, and enterprise change management records.
• Drive patching, upgrades, and end-of-life replacement of security infrastructure to maintain supported and hardened versions.
• Oversee certificate and key lifecycle operations, including issuance, renewal, revocation, and expiration monitoring.
• Maintain platform configuration baselines and monitor configuration drift, unauthorized changes, and unused or overly permissive rules.
• Develop and update operational runbooks, standard operating procedures, and disaster recovery plans; regularly test failover.
• Automate routine operational tasks such as rule provisioning, health checks, and reporting.
• Track and report platform uptime, change success rate, mean time to restore, and ticket backlog to security leadership.
• Provide audit evidence and support control testing for PCI, SOX, and other regulatory and internal requirements related to security platform operations.
• Manage vendor support relationships, maintenance contracts, and license renewals for security engineering tools.
• Coordinate security platform capacity planning with network and cloud engineering in advance of traffic growth and new service launches.