Role Description

• Design and maintain enterprise security architecture, technical standards, and reference patterns across on-premises, cloud, endpoint, network, identity, and application environments.
• Lead the technical design, implementation, integration, and optimization of cybersecurity platforms and controls.
• Evaluate new technologies and major system changes for security risk, control requirements, and alignment with enterprise architecture.
• Embed security requirements into infrastructure, application, ERP, manufacturing systems, and digital transformation initiatives.
• Design and improve security monitoring, alerting, threat detection, threat hunting, and response capabilities across the enterprise.
• Lead technical investigation, containment, recovery, and root cause analysis for complex cybersecurity incidents.
• Develop and maintain incident response playbooks, technical procedures, escalation paths, and lessons learned actions.
• Lead enterprise vulnerability and exposure management across servers, endpoints, network devices, cloud services, applications, and other technology assets.
• Prioritize and coordinate remediation based on business criticality, exploitability, threat intelligence, regulatory impact, and compensating controls.
• Coordinate penetration testing, security assessments, secure configuration reviews, and validation of remediation activities.
• Provide technical leadership for identity and access management, privileged access, multifactor authentication, conditional access, and access governance controls.
• Engineer and optimize endpoint protection, email security, network security, cloud security, data protection, segmentation, encryption, logging, and secure remote access capabilities.
• Define security baselines and hardening standards and review exceptions to determine appropriate compensating controls.
• Translate cybersecurity frameworks, company policies, and regulatory requirements into practical technical controls and security requirements.
• Provide technical evidence and subject matter expertise for audits, customer assessments, risk reviews, regulatory activities, and third-party evaluations.
• Develop scripts, workflows, integrations, dashboards, and repeatable processes that automate security monitoring, investigation, response, reporting, and control validation.
• Establish and monitor meaningful technical metrics for cybersecurity risk, control health, vulnerabilities, incidents, and remediation progress.
• Lead complex cybersecurity projects and provide technical oversight for work performed by vendors and service providers.
• Serve as a trusted cybersecurity advisor and facilitate technical design reviews, risk discussions, and decisions for high-impact initiatives.
• Mentor engineers, administrators, and analysts and communicate complex cybersecurity risks and recommendations clearly to technical and non-technical audiences.

Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, Engineering, or a related field; or equivalent combination of education and experience.
• Minimum 3 years of progressive cybersecurity or information security experience, including advanced security engineering responsibilities and the design and implementation of enterprise security architecture and technical controls in a complex, multi-site environment.
• Hands-on experience across security monitoring, detection and response, vulnerability management, identity security, endpoint security, network security, cloud security, and technical response to complex cybersecurity incidents.
• Experience evaluating technology risk and supporting audits, risk assessments, and compliance activities in a regulated environment; experience in manufacturing, healthcare, medical device, life sciences, or another regulated industry preferred.
• Preferred: CISSP, CCSP, GIAC, Microsoft Security, AWS Security, or other advanced cybersecurity certification.
• Additional certifications in incident response, cloud security, penetration testing, identity, network security, or risk management are beneficial.

Requirements

• Deep technical knowledge of cybersecurity architecture, defense-in-depth, and Zero Trust principles.
• Strong expertise in threat detection, incident response, vulnerability management, and security operations.
• Experience securing cloud, network, endpoint, identity, and enterprise application environments.
• Ability to analyze complex technical risks and develop practical, scalable security solutions.
• Strong troubleshooting, investigation, and root cause analysis capabilities.
• Ability to lead through technical influence and collaborate effectively across cross-functional teams.
• Excellent written and verbal communication skills, including the ability to communicate cybersecurity risk to technical and business audiences.
• Strong project leadership, organizational, and continuous improvement skills.

Benefits

• Paid Time Off (PTO)
• 401(k) with up to a 6% company match
• Holiday pay
• Medical, dental, and vision insurance
• Short-term and long-term disability coverage
• Paid parental leave and much more!