Lead Cybersecurity Specialist

🔥 3 minutes ago

❄️ Minnesota – Remote

❄️ Minnesota – Remote

💵 $125k - $165k / year

⏰ Full Time

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Legence

WebsiteLinkedInAll Job Openings

10,000+ employees

🏗️ Construction

🤝 B2B

⚡ Energy

Construction • B2B • Energy

Legence is a Nasdaq-listed (LGN) provider of engineering, consulting, installation, and maintenance services that improve building performance and reliability for mission‑critical and technically demanding facilities. Founded in 1914 and now a Blackstone portfolio company, Legence delivers MEP engineering and design, program and project management, HVAC and process piping installation/fabrication, and ongoing preventative and corrective maintenance, with a strong emphasis on sustainability, net‑zero building design, and distributed generation. The company serves high-growth sectors including data centers, semiconductors, precision manufacturing, life sciences, healthcare, education, public sector, and commercial real estate, and reports large in-house teams of engineers, consultants, technicians, and craftspeople.

📋 Description

• Ensure the implementation and governance of secure cloud architectures across platforms. • Continue development, enforcement, and governance of cyber security controls (including identity, access management, and workload protection). • Partner with engineering teams to embed security into cloud-native development and DevOps processes (DevSecOps). • Evolve the organization’s security risk management program. • Conduct risk assessments, threat modeling, and control evaluations. • Translate technical risks into business impact and present recommendations to senior leadership. • Develop and maintain advanced automation frameworks and scripts to improve detection, response, and compliance capabilities. • Lead efforts to integrate security tooling (SIEM, EDR, CSPM, etc.) into a cohesive security ecosystem. • Oversee monitoring and detection strategies across networks, endpoints, and cloud environments. • Lead incident response efforts, including triage, containment, root cause analysis, and post-incident improvements. • Drive continuous improvement of detection use cases and response playbooks. • Lead vulnerability management lifecycle, including scanning, prioritization, and remediation strategies. • Coordinate perform penetration testing and adversary simulations. • Support and help shape governance, risk, and compliance initiatives (e.g., NIST, ISO, SOC 2). • Lead security assessments, audits, and third-party risk reviews. • Contribute to long-term cybersecurity strategy, roadmap planning, and security metrics reporting. • Act as a technical mentor and escalation point for junior analysts and engineers. • Oversee the career development of security team members. • Collaborate with IT, engineering, and business stakeholders to align security initiatives with organizational goals. • Stay ahead of emerging threats, technologies, and industry trends, bringing proactive recommendations to leadership.

🎯 Requirements

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). • 5–10+ years of experience in cybersecurity, with demonstrated progression into senior or lead responsibilities. • Deep expertise in cloud security, network security, and enterprise security architecture. • Strong experience with security technologies such as SIEM, EDR, IDS/IPS, firewalls, and encryption. • Proven experience in risk management, incident response, and vulnerability management. • Proficiency in scripting or programming (e.g., Python, PowerShell, Bash) for automation and security engineering. • Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001, CIS). • Strong analytical, problem-solving, and decision-making skills. • Excellent communication skills, with the ability to influence technical and non-technical stakeholders. • Industry certifications such as CISSP, CISM, CCSP, or GIAC are preferred. • Experience leading security initiatives or small teams.