Job Description

The Manager Security Engineering is a critical role within a security organization that is an architectural and engineering focused first focused team within a service delivery organizational structure. While this role does include typical manager responsibilities, it also requires technical knowledge maintenance and growth of technical skills with some hands-on responsibilities when required. The candidate must have a lengthy history with an engineering background and be able to mentor best engineering practices and standards down to their team. The Technical Security Engineering Manager will be responsible for ensuring their team members are providing engineering design, analysis, implementation, care & feeding, roadmap development and support for IT Security products of the organization.

• Manage and direct work effort of the Security Engineering Team based on Security’s overall road map, the Security Program Manager, and in collaboration with the Director & Chief IT Security Architect and the Director & Chief IT Enterprise Architect.
• Research, design, and implement cyber security solutions for organization that comply with all applicable security policies and standards
• Works with IT and internal and external business partners to ensure that security is factored into the evaluation, selection, installation and configuration process of for all technical applications.
• Lead and mentor staff to adhere to industry best security practices surrounding IT & Security Engineering, roadmap development, architectural analysis, architectural and engineering documentation, and standards development.
• Assists in the review and update of cyber security policies, architectures and standards
• Assists in responding to audits, penetration tests and vulnerability assessments

A successful candidate will have the expertise and skills described below.

• Bachelor's degree in computer science or a related field and 8+ years in security engineering with increasing levels of responsibility.
• Practical depth of knowledge in technical design, operational functions and experience with several security engineering technologies across various security domains.
• Technical breadth of knowledge overall security domains, to include network security (VPN, firewall, encryption, network monitoring, content filtering, wireless security), vulnerability security (scanning, static/dynamic code analysis, patching), endpoint protection (anti-malware/virus, intrusion detection/prevention), server security (web server, database), and cloud security (Azure, AWS).
• Understands best engineering practices, including documentation standards, business process flow diagrams, logical architecture diagrams, architectural review boards, Business Case Technical Engineering Proposals, and Change Advisory Plans.
• Can demonstrate a history of being a security thought leader and mentor within Security Engineering.
• Understands common security concerns, vulnerabilities, and exploitation techniques to think like an attacker and guard against those attack vectors.
• Proficiency with at least at least one scripting language (e.g., Python, PowerShell) to perform API integrations between technology systems.
• Strong documentation skills, especially with architecture diagrams and tool roadmap development.

Preferred

• Master's degree in computer science, software engineering, information systems, cybersecurity, or a related field.
• Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), Certified Information Security Manager (CISM), and/or Global Information Assurance Certification.