Lead Cybersecurity Specialist

🕒 vor 4 Tagen

❄️ Minnesota – Remote

❄️ Minnesota – Remote

💵 $125.000 - $165.000 / Jahr

⏰ Vollzeit

🟠 Senior

👮‍♂️ IT-Sicherheitsingenieur

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Legence

WebsiteLinkedInAlle Stellen

10.000+ Mitarbeiter

🏗️ Bauwesen

🤝 B2B

⚡ Energie

Construction • B2B • Energy

Legence ist ein an der Nasdaq notierter (LGN) Anbieter von Ingenieur-, Beratungs-, Installations- und Wartungsdienstleistungen, die die Leistung und Zuverlässigkeit von Gebäuden für mission-kritische und technisch anspruchsvolle Einrichtungen verbessern. Gegründet im Jahr 1914 und inzwischen ein Teil der Blackstone-Gruppe, bietet Legence MEP-Engineering und -Design, Programm- und Projektmanagement, HVAC- und Prozesspiping-Installation/Fertigung sowie laufende präventive und korrektive Wartung, mit einem starken Schwerpunkt auf Nachhaltigkeit, Netto-Null-Gebäudedesign und dezentraler Energieerzeugung. Das Unternehmen bedient Sektoren mit hohem Wachstum, darunter Rechenzentren, Halbleiter, Präzisionsfertigung, Life Sciences, Gesundheitswesen, Bildung, öffentlicher Sektor und Gewerbeimmobilien und berichtet über große interne Teams von Ingenieuren, Beratern, Technikern und Handwerkern.

Beschreibung

• Ensure the implementation and governance of secure cloud architectures across platforms. • Continue development, enforcement, and governance of cyber security controls (including identity, access management, and workload protection). • Partner with engineering teams to embed security into cloud-native development and DevOps processes (DevSecOps). • Evolve the organization’s security risk management program. • Conduct risk assessments, threat modeling, and control evaluations. • Translate technical risks into business impact and present recommendations to senior leadership. • Develop and maintain advanced automation frameworks and scripts to improve detection, response, and compliance capabilities. • Lead efforts to integrate security tooling (SIEM, EDR, CSPM, etc.) into a cohesive security ecosystem. • Oversee monitoring and detection strategies across networks, endpoints, and cloud environments. • Lead incident response efforts, including triage, containment, root cause analysis, and post-incident improvements. • Drive continuous improvement of detection use cases and response playbooks. • Lead vulnerability management lifecycle, including scanning, prioritization, and remediation strategies. • Coordinate perform penetration testing and adversary simulations. • Support and help shape governance, risk, and compliance initiatives (e.g., NIST, ISO, SOC 2). • Lead security assessments, audits, and third-party risk reviews. • Contribute to long-term cybersecurity strategy, roadmap planning, and security metrics reporting. • Act as a technical mentor and escalation point for junior analysts and engineers. • Oversee the career development of security team members. • Collaborate with IT, engineering, and business stakeholders to align security initiatives with organizational goals. • Stay ahead of emerging threats, technologies, and industry trends, bringing proactive recommendations to leadership.

🎯 Anforderungen

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience). • 5–10+ years of experience in cybersecurity, with demonstrated progression into senior or lead responsibilities. • Deep expertise in cloud security, network security, and enterprise security architecture. • Strong experience with security technologies such as SIEM, EDR, IDS/IPS, firewalls, and encryption. • Proven experience in risk management, incident response, and vulnerability management. • Proficiency in scripting or programming (e.g., Python, PowerShell, Bash) for automation and security engineering. • Experience with security frameworks and compliance standards (e.g., NIST, ISO 27001, CIS). • Strong analytical, problem-solving, and decision-making skills. • Excellent communication skills, with the ability to influence technical and non-technical stakeholders. • Industry certifications such as CISSP, CISM, CCSP, or GIAC are preferred. • Experience leading security initiatives or small teams.