Security Engineer Lead

Responsibilities

• Establish, govern, and direct implementation of enterprise cybersecurity control frameworks across server infrastructure, Microsoft 365 services, network environments, cloud platforms, and endpoint systems, ensuring alignment with federal cybersecurity standards, NIST security frameworks, and Zero Trust architecture principles.
• Govern the enterprise vulnerability management program, establishing risk-based prioritization strategies, remediation timelines, and executive reporting mechanisms to reduce exposure and ensure continuous compliance across enterprise IT environments.
• Define and enforce enterprise security configuration standards including endpoint protection baselines, Microsoft Defender security services, firewall policy governance, encryption controls, and access enforcement mechanisms to maintain confidentiality, integrity, and availability of enterprise systems.
• Direct integration and optimization of security telemetry across enterprise SIEM platforms, ensuring comprehensive log ingestion, effective correlation rule development, alert tuning, and alignment with incident detection and response objectives.
• Lead enterprise security control assessments, audit readiness activities, and compliance reporting, providing executive-level briefings on risk posture, remediation progress, emerging threat trends, and control effectiveness to senior cybersecurity and IT leadership.
• Serve as the enterprise technical authority during cybersecurity incident response activities, directing root cause analysis, validating containment and eradication strategies, and recommending long-term control improvements to prevent recurrence.
• Provide cybersecurity risk oversight during Change Advisory Board (CAB) reviews, evaluating infrastructure and application modifications for security impact and approving implementation based on enterprise risk assessment and mitigation adequacy.

Requirements

• Bachelor’s Degree with 12+ years of progressive cybersecurity experience, including demonstrated authority establishing, governing, and directing enterprise security engineering programs within complex IT environments OR Master’s Degree with 10+ years or Associate’s Degree with 15+ years of relevant experience may be substituted.
• Demonstrated experience establishing and governing enterprise cybersecurity control frameworks across server, network, M365, cloud, and endpoint environments.
• Proven ability to direct enterprise vulnerability management strategy, including risk-based prioritization, remediation governance, and executive-level reporting of security posture.
• Advanced knowledge of federal cybersecurity mandates and NIST-based frameworks.
• Experience leading enterprise security assessments, control validation reviews, and audit readiness initiatives.
• Demonstrated authority integrating and optimizing security telemetry within enterprise SIEM platforms to enhance detection, response, and threat visibility.
• Experience directing incident response activities, providing executive briefings, and recommending long-term control improvements to reduce organizational risk.
• Ability to establish security performance metrics and drive continuous improvement across multiple infrastructure domains.

Qualifications

• Clearance: SECRET or L Clearance

Skills

• Security Architecture
• Security Compliance
• Security Governance
• Security Risk Management
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Operations
• Security Architecture and Design
• Security Engineering
• Security Operations Center (SOC)
• Security Threat Intelligence
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security Metrics and Reporting
• Security Technology
• Security Architecture and Design
• Security Operations
• Security Incident Response
• Security Assessment and Testing
• Security Policy and Procedure Development
• Security Awareness and Training
• Security