Cybersecurity Engineering & Operations Director

🕒 Outubro 7

🇺🇸 Estados Unidos – Remoto (EUA)

💵 $150.000 - $190.000 / ano

⏰ Tempo Integral

🔴 Especialista

⚙️ Operações

🦅 Patrocina Visto H1B

Esta empresa já patrocinou vistos H1B no passado.

👻 Score fantasma 0%

O que significa: a chance de ninguém estar realmente contratando para esta vaga.Como ler: 60% ou mais significa que achamos que é uma vaga fantasma. Pontuações mais baixas preocupam menos.Como pontuamos: tempo em aberto, republicações, vagas abertas vs tamanho do time, rapidez para fechar vagas, e se o salário está divulgado.Observação: é uma estimativa de dados públicos, não um julgamento da empresa. Vagas reais podem ter pontuação alta, então use como uma dica, não como um fato.

Candidatar-se

Encontrar Vagas Remotas Similares

Onit

SiteLinkedInTodas as Vagas

501 - 1000 funcionários

💼 Consultoria

⚖️ Jurídico

☁️ SaaS

Consulting • Legal • SaaS

<Onit> é uma empresa de software de operações jurídicas e gestão jurídica empresarial nativa em IA, que oferece soluções para gestão de despesas jurídicas e casos, gerenciamento de ciclo de vida de contratos (CLM), eBilling, gerenciamento de fornecedores e conformidade, automação de workflows e ferramentas impulsionadas por IA como ReviewAI e Spend Agent. Sua plataforma Unity ELM e os produtos associados (SimpleLegal, BusyLamp, ContractWorks, SecureDocs, OnitX CLM e um Catálogo de Apps) permitem que equipes jurídicas centralizem documentos, automatizem fluxos de trabalho, extraiam dados de contratos via OCR e otimizem despesas e relações com fornecedores. A Onit atende operações jurídicas empresariais, Consultores Jurídicos e gerentes de contratos em indústrias como farmacêutica, finanças, seguros, tecnologia e governo, oferecendo serviços de implementação, suporte e serviços profissionais.

Descrição

• Develop and execute the cybersecurity engineering and operations strategy with the VP, Compliance and Security • Translate risk and business priorities into technical roadmaps, architecture standards, and measurable outcomes • Lead design and continuous improvement of security controls and guardrails across AWS and corporate environments • Deliver security automation as code using Terraform, Python, CI/CD, and policy-as-code • Own technical security operations and incident response, including detection, investigation, containment, eradication, and recovery • Maintain and exercise incident response plans, playbooks, and runbooks • Build automated detection and response workflows across SIEM, SOAR, EDR, and cloud-native tooling • Coordinate executive, legal, and regulatory escalation with the VP • Own vulnerability and exposure management across applications, cloud, endpoints, and external attack surfaces • Set risk-based remediation SLAs and prioritize issues by exploitability, exposure, and business impact • Drive root-cause fixes for systemic weaknesses • Provide security leadership for Microsoft 365, Entra ID, corporate endpoints, email security, and application/product security across the SDLC • Lead initiatives involving SAST/DAST/SCA, SBOMs, API security, threat modeling, security champions, and AI-enabled applications and integrations • Lead, mentor, and develop the cybersecurity manager, engineers, and security operations staff • Define team structure, career paths, and scalable operating processes • Manage security vendors, penetration testing, and managed security services • Serve as senior technical security advisor to Engineering, IT, Product, and executive leadership

🎯 Requisitos

• 10+ years of progressive cybersecurity experience • 5+ years in security leadership or management roles leading security engineering, security operations, or cloud security functions • Experience managing managers and technical teams • Deep expertise securing cloud-native enterprise SaaS applications • Strong hands-on AWS security experience with IAM, VPC, EC2, RDS, S3, EKS/ECS, logging, and monitoring • Strong knowledge of Linux, networking, containers, and Kubernetes • Experience with SIEM, EDR, CSPM, vulnerability management, WAF, and security monitoring platforms • Experience building or improving incident detection and response programs • Experience securing Microsoft 365 and Entra ID environments, including identity protection, MFA, Conditional Access, privileged identity management, and access governance • Experience implementing privileged access management and Just-In-Time access architectures • Strong understanding of application and API security, including SAST, DAST, SCA, SBOMs, secrets management, and authentication/authorization • Experience with Python, Bash, Terraform, APIs, CI/CD platforms, Infrastructure-as-Code security, and policy-as-code guardrails • Experience using AI tools and LLM-based assistants in security work, including crafting prompts, evaluating output accuracy, and integrating AI into workflows • Ability to communicate complex cybersecurity risks to engineering leaders, executives, and non-technical stakeholders • Preferred experience with multi-tenant SaaS security, CrowdStrike, Cloudflare, DevSecOps, offensive security or red-team programs, SOC 2, ISO 27001, NIST, or FedRAMP technical controls • Preferred certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC

🏖️ Benefícios

• Annual discretionary bonus eligibility • Three medical plan options • Dental and vision coverage • Employer HSA contribution for HDHP plan employees • 401(k) with 100% match on the first 3% and 50% on the next 2% of employee contributions • Flexible paid time off • 7 sick days • 9 paid company holidays annually • Paid leave for birth parents, non-birth parents, and caregivers • Surrogacy and adoption reimbursement • 100% employer-paid life and disability insurance • Voluntary hospital indemnity, critical illness, accident, and pet insurance • Healthcare FSA, HSA, and dependent care FSA • One paid volunteer day each year

📊 Verifique sua pontuação de currículo para esta vaga

Melhore suas chances de conseguir uma entrevista verificando sua pontuação de currículo antes de se candidatar.

Enviar Currículo