Cybersecurity Engineering & Operations Director

🕒 October 7

🇺🇸 United States – Remote

💵 $150k - $190k / year

⏰ Full Time

🔴 Lead

⚙️ Operations

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 0%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Onit

WebsiteLinkedInAll Job Openings

501 - 1000 employees

💼 Consulting

⚖️ Legal

☁️ SaaS

Consulting • Legal • SaaS

<Onit> is an AI-native legal operations and enterprise legal management software company that provides solutions for legal spend and matter management, contract lifecycle management (CLM), eBilling, vendor and compliance management, workflow automation, and AI-driven tools like ReviewAI and Spend Agent. Their Unity ELM platform and associated products (SimpleLegal, BusyLamp, ContractWorks, SecureDocs, OnitX CLM, and an App Catalog) enable legal teams to centralize documents, automate workflows, extract contract data via OCR, and optimize spend and vendor relationships. Onit serves enterprise legal operations, General Counsel, and contract managers across industries such as pharmaceutical, finance, insurance, technology, and government, and offers implementation, support, and professional services.

📋 Description

• Develop and execute the cybersecurity engineering and operations strategy with the VP, Compliance and Security • Translate risk and business priorities into technical roadmaps, architecture standards, and measurable outcomes • Lead design and continuous improvement of security controls and guardrails across AWS and corporate environments • Deliver security automation as code using Terraform, Python, CI/CD, and policy-as-code • Own technical security operations and incident response, including detection, investigation, containment, eradication, and recovery • Maintain and exercise incident response plans, playbooks, and runbooks • Build automated detection and response workflows across SIEM, SOAR, EDR, and cloud-native tooling • Coordinate executive, legal, and regulatory escalation with the VP • Own vulnerability and exposure management across applications, cloud, endpoints, and external attack surfaces • Set risk-based remediation SLAs and prioritize issues by exploitability, exposure, and business impact • Drive root-cause fixes for systemic weaknesses • Provide security leadership for Microsoft 365, Entra ID, corporate endpoints, email security, and application/product security across the SDLC • Lead initiatives involving SAST/DAST/SCA, SBOMs, API security, threat modeling, security champions, and AI-enabled applications and integrations • Lead, mentor, and develop the cybersecurity manager, engineers, and security operations staff • Define team structure, career paths, and scalable operating processes • Manage security vendors, penetration testing, and managed security services • Serve as senior technical security advisor to Engineering, IT, Product, and executive leadership

🎯 Requirements

• 10+ years of progressive cybersecurity experience • 5+ years in security leadership or management roles leading security engineering, security operations, or cloud security functions • Experience managing managers and technical teams • Deep expertise securing cloud-native enterprise SaaS applications • Strong hands-on AWS security experience with IAM, VPC, EC2, RDS, S3, EKS/ECS, logging, and monitoring • Strong knowledge of Linux, networking, containers, and Kubernetes • Experience with SIEM, EDR, CSPM, vulnerability management, WAF, and security monitoring platforms • Experience building or improving incident detection and response programs • Experience securing Microsoft 365 and Entra ID environments, including identity protection, MFA, Conditional Access, privileged identity management, and access governance • Experience implementing privileged access management and Just-In-Time access architectures • Strong understanding of application and API security, including SAST, DAST, SCA, SBOMs, secrets management, and authentication/authorization • Experience with Python, Bash, Terraform, APIs, CI/CD platforms, Infrastructure-as-Code security, and policy-as-code guardrails • Experience using AI tools and LLM-based assistants in security work, including crafting prompts, evaluating output accuracy, and integrating AI into workflows • Ability to communicate complex cybersecurity risks to engineering leaders, executives, and non-technical stakeholders • Preferred experience with multi-tenant SaaS security, CrowdStrike, Cloudflare, DevSecOps, offensive security or red-team programs, SOC 2, ISO 27001, NIST, or FedRAMP technical controls • Preferred certifications such as CISSP, CCSP, AWS Security Specialty, or GIAC

🏖️ Benefits

• Annual discretionary bonus eligibility • Three medical plan options • Dental and vision coverage • Employer HSA contribution for HDHP plan employees • 401(k) with 100% match on the first 3% and 50% on the next 2% of employee contributions • Flexible paid time off • 7 sick days • 9 paid company holidays annually • Paid leave for birth parents, non-birth parents, and caregivers • Surrogacy and adoption reimbursement • 100% employer-paid life and disability insurance • Voluntary hospital indemnity, critical illness, accident, and pet insurance • Healthcare FSA, HSA, and dependent care FSA • One paid volunteer day each year