Senior Cybersecurity Engineer
Support the design, implementation, and monitoring of security controls and solutions across the HomeServe business while ensuring appropriate documentation is produced and maintained. This hands-on technical and advisory role requires advanced expertise in cybersecurity engineering, architecture, and threat management. The Senior Cybersecurity Engineer will perform day-to-day administration of security tools and devices, shape security strategy, evaluate emerging threats, and implement scalable security solutions.
Responsibilities
- Partner with HomeServe business units and risk functions to identify and prioritize security requirements, performing advanced risk and business impact assessments.
- Develop enterprise-level strategies, roadmaps, and technical standards to address identified risks and ensure alignment with business objectives.
- Lead and conduct complex control and vulnerability assessments; evaluate the effectiveness of security controls and direct remediation activities across teams.
- Provide senior-level reporting and insights to the Director of Information Security and management on residual risk, vulnerabilities, compliance gaps, and emerging threats.
- Serve as a key advisor on major application development, acquisition, and infrastructure projects to ensure security requirements and controls are fully embedded.
- Guide and influence security architecture decisions, policies, and standards; ensure consistency and scalability across the enterprise.
- Define, validate, and continuously improve baseline security configurations for operating systems, applications, networks, and telecommunications systems.
- Oversee and support the resolution of audit findings from internal and external auditors; act as a lead contact for audit scoping, analysis, and remediation activities.
- Lead or provide escalation support for significant security incidents, investigations, and compliance reviews, ensuring lessons learned inform future improvements.
- Mentor, coach, and provide technical guidance to junior engineers and analysts; foster a culture of continuous learning and knowledge sharing.
- Proactively research, evaluate, and pilot emerging technologies, threats, and industry trends to strengthen HomeServe’s security posture.
- Represent the Information Security function in cross-functional initiatives, audits, and external reviews; serve as a subject matter expert on security-related issues.
- Promote collaboration across IT and business teams, ensuring security is integrated into processes, projects, and decision-making.
Requirements
- Bachelor’s degree in Computer Science, Information Security, Cybersecurity, or related field experience. Master’s degree preferred.
- Minimum seven (7) to ten (10) years of experience in the Information Security field, with demonstrated progression into senior-level responsibilities such as leading technology implementations, assessments, mentoring, or serving as an escalation point.
- Certifications (preferred): CISSP, CISM, CCSP, GIAC, AWS Certified Security - Specialty, or equivalent security certifications.
Skills
- Strong knowledge and understanding of security frameworks (NIST, ISO 27001, CIS Controls).
- Experience with security technologies such as SOC, SIEM, EDR, firewalls, IAM, PAM, and cloud security solutions.
- Experience applying practical controls to secure generative and agentic AI technologies.
- Knowledge of securing CI/CD pipelines.
- Familiarity with Infrastructure as Code (IaC).
- Working knowledge of a modern programming language, a centralized configuration management platform (e.g. Ansible, Puppet, Chef), or SOAR playbook development.
- Strong background in performing advanced risk assessments, vulnerability management, penetration testing, and forensic investigations.
- In-depth knowledge of network infrastructure (routers, switches, firewalls, WiFi) and associated protocols, with ability to advise on secure design.
- Demonstrated ability to design, validate, and improve enterprise baseline configurations for operating systems, applications, and cloud environments.
- Proven experience developing, documenting, and maintaining enterprise-level security policies, standards, and procedures.
- Ability to act as a subject matter expert and escalation point for complex incidents and projects.
- Demonstrated leadership in mentoring and guiding junior team members.
- Strong communication skills, able to engage effectively with both technical and non-technical stakeholders, including management.
- Advanced analytical and problem-solving skills, with a proactive approach to mitigating threats and improving controls.
- Ability to balance hands-on technical work with advisory and oversight responsibilities.
Physical Requirements
The physical demands described represent those that must be met by an employee to successfully perform the essential functions of this position. While performing the duties of this position, the employee is regularly required to listen, talk, and hear. The employee frequently is required to use hands or fingers, handle or feel objects, tools, or controls while executing tasks like working on a computer or talking on the telephone. The employee is occasionally required to stand; walk; sit; and reach with hands and arms. The employee must occasionally lift and/or move up to 15 pounds. Specific vision abilities required by this position include close vision, distance vision, and the ability to adjust focus. The noise level in the work environment is usually moderate to low.
Pay
Salary Range (Norwalk, CT): $125,932.60 - $167,910.14 per year. Annual bonus potential: 10%.