About the role
Responsibilities:
- Lead, mentor, and coach a team of security engineers, setting a high bar for technical excellence, ownership, and delivery.
- Design and Build Security Systems: Own the architecture and implementation of scalable, resilient security platforms and services. Ensure solutions are designed for integration, automation, and long-term maintainability.
- Hands-on Technical Leadership: Provide technical direction through system design, code reviews, and architectural decision-making. Actively contribute to design and development where needed.
- Engineering-First Approach to Security: Drive the shift from manual, process-driven security controls to automated, system-enforced controls embedded in engineering workflows.
- Build vs. Buy Decisions: Evaluate third-party technologies and platforms. Make informed decisions on when to build internally vs. leverage vendors, considering cost, scalability, risk, and integration complexity.
- Platform Integration Ownership: Ensure security capabilities are integrated across enterprise systems (e. g., identity platforms, cloud environments, developer tooling, SIEM/SOAR, and data platforms).
- Program Execution: Deliver on key security engineering initiatives such as zero trust, identity lifecycle automation, cloud security posture, AI security enablement, and vulnerability management platforms.
- Partner Across Stakeholders: Work closely with engineering, IT, cloud, GRC, and product teams to design solutions that align with business needs while improving security posture.
- Support Compliance Through Engineering: Partner with GRC and compliance teams to implement technical controls that satisfy frameworks such as NIST, ISO 27001 and SOC 2 through scalable systems rather than manual processes.
- Operational Excellence: Ensure systems are observable, reliable, and supported with strong operational practices (monitoring, alerting, incident response integration).
Requirements:
- Strong software engineering background (e. g., Python, Go, Java, or similar) with experience building production systems.
- Deep expertise in system design and architecture, including distributed systems and API-driven integrations.
- Experience designing and operating security platforms (IAM, cloud security, endpoint, vulnerability management, etc. ).
- Ability to evaluate and integrate third-party security solutions into enterprise ecosystems.
- Strong understanding of modern security principles (zero trust, identity-first security, defence-in-depth).
- Experience with cloud platforms (AWS, Azure, GCP) and cloud-native architectures.
- Excellent communication skills, with the ability to translate complex technical decisions into business impact.
- Bachelor's degree in computer science, engineering, or a related technical field, or equivalent practical experience.
- Demonstrated experience designing, building, and operating production systems at scale.
- Prior experience in security engineering or closely related engineering disciplines.
- Proven experience leading engineering teams and delivering complex technical initiatives.
- Strong experience with coding, system integration, and automation.
- Experience evaluating and implementing enterprise security technologies.