Director of Cybersecurity, Architecture and Engineering

🕒 vor 4 Tagen

Jetzt Bewerben

Ähnliche Remote-Jobs finden

E-Mail-Benachrichtigung für neue Jobs einrichten

📊 Überprüfen Sie Ihre Lebenslauf-Bewertung für diese Stelle

Verbessern Sie Ihre Chancen auf ein Vorstellungsgespräch, indem Sie Ihre Lebenslauf-Bewertung vor der Bewerbung überprüfen.

Lebenslauf hochladen

Onterris

WebsiteLinkedInAlle Stellen

1001 - 5000 Mitarbeiter

Gegründet 2012

💼 Beratung

🔬 Wissenschaft

⚡ Energie

Consulting • Science • Energy

Onterris ist ein globales Unternehmen für Umweltlösungen, das mit Organisationen zusammenarbeitet, um komplexe Herausforderungen an der Schnittstelle von Umweltbelastungen, regulatorischen Erwartungen und operationellen Risiken zu lösen. Das Unternehmen bietet Umweltberatungs- und technische Dienstleistungen an, darunter Sanierung kontaminierter Standorte, Genehmigungen und Compliance, Notfallmaßnahmen, Schornsteinmessungen, Lecksuche, Labortests & Analysen, Wasserberatung/-behandlung und PFAS-Sanierung. Die Dienstleistungen richten sich an asset- und ressourcenintensive Sektoren wie Energie, Infrastruktur, Fertigung, Bergbau und Regierung. Onterris ist in den USA, Kanada und Australien tätig, beschäftigt etwa 3. 500 Mitarbeiter in über 100 Büros und betreut Tausende von Kunden. Es positioniert sich als system-orientierter, wissenschaftsgetriebener Partner, der Organisationen dabei hilft, Umweltdaten in praktische, regulatorisch konforme Lösungen umzusetzen.

Beschreibung

• Lead, mentor, and develop a team of security engineers responsible for perimeter and endpoint security, detection and monitoring, and vulnerability management engineering • Serve as a hands-on technical backstop across the team's tool domains (firewall, EDR, SIEM, WAF, vulnerability management, and security awareness platforms), able to step in during absences or transitions • Own the strategic relationship with our managed security services provider (MSSP), including SLAs, escalation processes, contract performance, and renewal • Serve as the Tier 2/3 escalation point for security incidents raised by the MSSP, providing decision authority on containment, access, and asset-criticality judgment calls • Serve as the primary technical point of contact between the security engineering team and the GRC team, ensuring technical controls required for CMMC, NIST SP 800-171, and other applicable frameworks are designed, implemented, and maintained • Design and maintain security architecture standards for network segmentation, system hardening baselines, and identity and access boundaries, in partnership with the team that owns IAM • Develop and continuously refine the security engineering roadmap and technical standards in alignment with the evolving threat landscape and business risk tolerance • Define OKRs, metrics, and scorecards for the security engineering function and report on team health and risk posture to executive leadership • Partner with development and infrastructure teams to identify and remediate application- and infrastructure-level vulnerabilities • Own workforce planning for the team, including current team development and future headcount growth • Ensure the team maintains up-to-date documentation of tool ownership, backup coverage, and operational runbooks • Track developments in the digital business and threat environment to ensure they are reflected in security strategy and architecture

🎯 Anforderungen

• 10+ years of progressive information security experience, including hands-on tool engineering and team leadership • Bachelor's degree in Computer Science, Information Systems, or a related field • Demonstrated experience managing or technically partnering with a managed security services provider (MSSP) for SOC/NOC functions • Experience supporting CMMC and/or NIST SP 800-171 / 800-53 control implementation in partnership with a GRC or compliance function • Deep technical knowledge across core security tooling categories: next-generation firewalls, EDR, SIEM, WAF, vulnerability management platforms, and security awareness platforms • Strong understanding of network architecture, segmentation, and security concepts in large-scale environments • Demonstrated ability to build, mentor, and retain a small, high-performing technical team • Knowledge of federal cybersecurity and data privacy laws, regulations, and policies applicable to a federal contractor • Strong understanding of the cybersecurity threat lifecycle, attack vectors, and intrusion set tactics, techniques, and procedures (TTPs) • Excellent cross-functional communication skills, with the ability to translate technical risk for executive audiences.

🏖️ Vorteile

• Annual bonus (15 %)