Director of Cybersecurity, Architecture and Engineering

Job not on LinkedIn

🔥 2 hours ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Onterris

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2012

💼 Consulting

🔬 Science

⚡ Energy

Consulting • Science • Energy

Onterris is a global environmental solutions company partnering with organizations to solve complex challenges at the intersection of environmental pressures, regulatory expectations and operational risk. The firm provides environmental consulting and technical services — including contaminated land remediation, permitting and compliance, emergency response, stack testing, leak detection, laboratory testing & analysis, water consulting/treatment and PFAS remediation — to asset- and resource-intensive sectors such as energy, infrastructure, manufacturing, mining and government. Onterris operates across the U. S. , Canada and Australia, reports ~3,500 employees, 100+ offices and serves thousands of clients, and positions itself as a systems-thinking, science-driven partner helping organizations translate environmental data into practical, regulatory-compliant solutions.

📋 Description

• Lead, mentor, and develop a team of security engineers responsible for perimeter and endpoint security, detection and monitoring, and vulnerability management engineering • Serve as a hands-on technical backstop across the team's tool domains (firewall, EDR, SIEM, WAF, vulnerability management, and security awareness platforms), able to step in during absences or transitions • Own the strategic relationship with our managed security services provider (MSSP), including SLAs, escalation processes, contract performance, and renewal • Serve as the Tier 2/3 escalation point for security incidents raised by the MSSP, providing decision authority on containment, access, and asset-criticality judgment calls • Serve as the primary technical point of contact between the security engineering team and the GRC team, ensuring technical controls required for CMMC, NIST SP 800-171, and other applicable frameworks are designed, implemented, and maintained • Design and maintain security architecture standards for network segmentation, system hardening baselines, and identity and access boundaries, in partnership with the team that owns IAM • Develop and continuously refine the security engineering roadmap and technical standards in alignment with the evolving threat landscape and business risk tolerance • Define OKRs, metrics, and scorecards for the security engineering function and report on team health and risk posture to executive leadership • Partner with development and infrastructure teams to identify and remediate application- and infrastructure-level vulnerabilities • Own workforce planning for the team, including current team development and future headcount growth • Ensure the team maintains up-to-date documentation of tool ownership, backup coverage, and operational runbooks • Track developments in the digital business and threat environment to ensure they are reflected in security strategy and architecture

🎯 Requirements

• 10+ years of progressive information security experience, including hands-on tool engineering and team leadership • Bachelor's degree in Computer Science, Information Systems, or a related field • Demonstrated experience managing or technically partnering with a managed security services provider (MSSP) for SOC/NOC functions • Experience supporting CMMC and/or NIST SP 800-171 / 800-53 control implementation in partnership with a GRC or compliance function • Deep technical knowledge across core security tooling categories: next-generation firewalls, EDR, SIEM, WAF, vulnerability management platforms, and security awareness platforms • Strong understanding of network architecture, segmentation, and security concepts in large-scale environments • Demonstrated ability to build, mentor, and retain a small, high-performing technical team • Knowledge of federal cybersecurity and data privacy laws, regulations, and policies applicable to a federal contractor • Strong understanding of the cybersecurity threat lifecycle, attack vectors, and intrusion set tactics, techniques, and procedures (TTPs) • Excellent cross-functional communication skills, with the ability to translate technical risk for executive audiences.

🏖️ Benefits

• Annual bonus (15 %)