Director of Cybersecurity, Architecture and Engineering

🕒 il y a 9 jours

Postuler Maintenant

Trouver des Emplois à Distance Similaires

Configurer une alerte email pour les nouveaux emplois

📊 Vérifiez votre score de CV pour ce poste

Améliorez vos chances d'obtenir un entretien en vérifiant votre score de CV avant de postuler.

Télécharger le CV

Onterris

Site WebLinkedInTous les Emplois

1001 - 5000 employés

Fondée en 2012

💼 Conseil

🔬 Science

⚡ Énergie

Consulting • Science • Energy

Onterris est une entreprise mondiale de solutions environnementales collaborant avec des organisations pour résoudre des défis complexes à l'intersection des pressions environnementales, des attentes réglementaires et des risques opérationnels. La société fournit des services de conseil et des services techniques en environnement — y compris la réhabilitation de terrains contaminés, l'autorisation et la conformité, la réponse aux urgences, les tests d'échappement, la détection de fuites, les tests de laboratoire et l'analyse, la consultation/traitement de l'eau et la réhabilitation des PFAS — aux secteurs intensifs en actifs et en ressources tels que l'énergie, les infrastructures, la fabrication, l'exploitation minière et le gouvernement. Onterris opère aux États-Unis, au Canada et en Australie, compte environ 3 500 employés, plus de 100 bureaux et sert des milliers de clients, et se positionne comme un partenaire axé sur la systémique et dirigé par la science, aidant les organisations à traduire les données environnementales en solutions concrètes et conformes à la réglementation.

Description

• Lead, mentor, and develop a team of security engineers responsible for perimeter and endpoint security, detection and monitoring, and vulnerability management engineering • Serve as a hands-on technical backstop across the team's tool domains (firewall, EDR, SIEM, WAF, vulnerability management, and security awareness platforms), able to step in during absences or transitions • Own the strategic relationship with our managed security services provider (MSSP), including SLAs, escalation processes, contract performance, and renewal • Serve as the Tier 2/3 escalation point for security incidents raised by the MSSP, providing decision authority on containment, access, and asset-criticality judgment calls • Serve as the primary technical point of contact between the security engineering team and the GRC team, ensuring technical controls required for CMMC, NIST SP 800-171, and other applicable frameworks are designed, implemented, and maintained • Design and maintain security architecture standards for network segmentation, system hardening baselines, and identity and access boundaries, in partnership with the team that owns IAM • Develop and continuously refine the security engineering roadmap and technical standards in alignment with the evolving threat landscape and business risk tolerance • Define OKRs, metrics, and scorecards for the security engineering function and report on team health and risk posture to executive leadership • Partner with development and infrastructure teams to identify and remediate application- and infrastructure-level vulnerabilities • Own workforce planning for the team, including current team development and future headcount growth • Ensure the team maintains up-to-date documentation of tool ownership, backup coverage, and operational runbooks • Track developments in the digital business and threat environment to ensure they are reflected in security strategy and architecture

🎯 Exigences

• 10+ years of progressive information security experience, including hands-on tool engineering and team leadership • Bachelor's degree in Computer Science, Information Systems, or a related field • Demonstrated experience managing or technically partnering with a managed security services provider (MSSP) for SOC/NOC functions • Experience supporting CMMC and/or NIST SP 800-171 / 800-53 control implementation in partnership with a GRC or compliance function • Deep technical knowledge across core security tooling categories: next-generation firewalls, EDR, SIEM, WAF, vulnerability management platforms, and security awareness platforms • Strong understanding of network architecture, segmentation, and security concepts in large-scale environments • Demonstrated ability to build, mentor, and retain a small, high-performing technical team • Knowledge of federal cybersecurity and data privacy laws, regulations, and policies applicable to a federal contractor • Strong understanding of the cybersecurity threat lifecycle, attack vectors, and intrusion set tactics, techniques, and procedures (TTPs) • Excellent cross-functional communication skills, with the ability to translate technical risk for executive audiences.

🏖️ Avantages

• Annual bonus (15 %)