Jobs · Delaware

Senior Director of Cyber Defense Architecture & Engineering

Cencora · Wilmington, DE · 1 mo ago
$142k–$283k/yrFull-time
We need to output HTML fragment with sections: headings

for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. Only include sections that have real specific content. We need to parse the job posting. We have: - Intro paragraph: "Our team members are at the heart..." etc. That's about the role/company. Could be "About the role" or "About the company". We'll treat as "About the role". Use

. - Job Details Summary: description of role responsibilities. Could be part of responsibilities. We'll include responsibilities section. - Primary Responsibilities: a long list of bullet-like statements separated by periods. We'll need to convert to

  • . Each bullet likely each sentence or clause. We'll need to extract each responsibility as list items. - Qualifications: includes Bachelor's degree..., Master's degree..., Experience..., Preferred Certifications..., Behavioral Skills..., Technical Skills..., Tools Knowledge... This is a mix of qualifications and skills. We need to separate sections: Qualifications, Skills maybe. The instruction: Use headings for sections like About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule. So we can have Qualifications (education, experience, certifications) and Skills (behavioral, technical, tools). Requirements maybe similar to qualifications but we can treat Qualifications as education/experience/certifications, Skills as behavioral/technical/tools. - Benefits: "What Cencora offers" paragraph describing benefits. We'll include Benefits section with
    • items. - Pay: "Full time Salary Range* $141,600 - 283,250 ..." plus note about locale variations. That's specific content, so include Pay section. - Schedule: Not explicitly mentioned; maybe "Full time" indicates schedule. Could infer schedule: Full-time. But we should only include Schedule if posting actually states it. It says "Full time". That's schedule info. So we can include Schedule section with

      Full-time. We must not repeat job title as heading. No Job ID etc. We must remove boilerplate: EEO, affiliated companies, etc. Also remove application instructions like "Apply today!" and "Visit https://...". Also remove "Our employee experience is a strategic priority..." maybe that's part of About the role? It's about leadership expectations; could be part of About the role or Responsibilities? It's about leaders accountability; could be part of About the role. We'll keep it in About the role. We must preserve all substantive information; not invent or summarize away detail. So we need to keep details like specific responsibilities list, qualifications details, benefits details, pay range, schedule. We must not create sections with filler like "commensurate with experience". Not present. We need to output only HTML fragment, no markdown fences. Let's extract content. First, About the role: combine introductory paragraphs up to "Apply today!"? Actually "Apply today!" is application instruction, remove. So About the role includes: "Our team members are at the heart of everything we do. At Cencora, we are united in our responsibility to create healthier futures, and every person here is essential to us being able to deliver on that purpose. If you want to make a difference at the center of health, come join our innovative company and help us improve the lives of people and animals everywhere." Also maybe include "Our employee experience is a strategic priority for our company. Our leaders are accountable for leading with purpose, fairness, and equity. They are responsible for building and developing diverse teams, maintaining a safe and inclusive environment, setting clear priorities, and holding self and team accountable for executing with excellence." That seems like leadership expectations but still about role. We'll include. Now Responsibilities: The "Job Details Summary" paragraph plus the "Primary Responsibilities" list. Job Details Summary: "The Senior Director of Cyber Defense Architecture & Engineering leads the strategy, design, engineering, and continuous improvement of enterprise detection, response, and threat mitigation capabilities across the enterprise. This role is accountable for building or integrating resilient, intelligence-driven, automated cyber defense platforms spanning endpoint, network, cloud, identity, data, and SaaS environments. This role is responsible for building strong partnerships with technology teams, other corporate support functions, and other Information Security organizations to protect the corporate brand, data, and assets and is responsible for the design, implementation, operation, and maintenance of an information security framework, processes, and systems, that protect the business, services, information and systems against unauthorized use, disclosure, modification, damage, and loss. The position partners closely with the CISO, Cyber Defense Sr. ..." We'll keep that as prose maybe in

      . Then the Primary Responsibilities list: many items separated by periods. We'll split into list items. Let's list them: - Define and execute the enterprise cyber defense architecture strategy aligned to threat landscape and risk appetite in collaboration with Cyber Defense senior leadership. - Develop layered defense models across endpoint, network, cloud, identity, and SaaS. - Establish and document detection engineering standards and reference architectures. - Collaborate & enable Zero Trust monitoring and enforcement architecture. - Present defense posture maturity, risk trends, and roadmap to executive leadership. - Establish the enterprise detection engineering program and lead evaluation of new tools and technologies to support the Cyber Defense ecosystem. - Define logging standards and telemetry requirements across platforms. - Collaborate & partner with key stakeholder to oversee use case lifecycle management (creation, tuning, retirement). - Standardize MITRE ATT&CK mapping across detections. - Reduce false positives while increasing true positive detection rates in collaboration with Cyber Defense teams. - Oversee or drive a collaborative approach to architecture and engineering of: | SIEM platforms | SOAR playbooks | EDR/XDR solutions | NDR solutions | Email security and anti-phishing platforms | Deception technologies | Threat intelligence platforms | Security data lakes and analytics platforms | - Drive automation, AI/ML integration, and policy-as-code for response workflows in collaboration with Cloud Security and other senior security leaders. - Enable automated containment and remediation capabilities. - Partner with Incident Response and Cyber Counter Adversary leadership for operational efficiency and maturity uplifts. - Support purple team exercises to validate detection and response effectiveness. - Integrate strategic, tactical, and operational threat intelligence into engineering roadmap. - Translate threat actor activity into detection content and control enhancements. - Integrate defense controls across: Public cloud environments (AWS, Azure, GCP) | Hybrid data centers | SaaS platforms | Enterprise networks, endpoints and mobile | OT/IoT (in partnership with OT sr. cybersecurity leadership) - Support M&A security integrations and divestiture disentanglement. - Ensure compliance with global regulatory regimes (e.g., HIPAA, GDPR, SOX, FDA/GxP where applicable). - Establish KPIs, OKRs, and performance dashboards. - Establish control validation framework. - Lead breach simulation and continuous control monitoring as needed to support Cyber Defense senior leaders. - Report measurable defense maturity to executive leadership and other senior leaders. - Lead global team of detection engineers, platform engineers, and automation specialists. - Establish engineering career paths and succession planning. - Enterprise financial management and planning experience. - Follows information security trends within and outside of work with executive leadership to strategize and recommend changes and updates to company. Note some items have pipes indicating list; we can keep as is within li. Now Qualifications: Education, Experience, Preferred Certifications. Education: "Bachelor's degree in cybersecurity, computer science, information security, information systems, or a related field, or equivalent experience required. Master’s Degree in Business Administration, Computer Science, Information Technology or any other related discipline or equivalent related experience." Experience: "Experience 12+ years of directly-related or relevant experience 8+ years in a managerial capacity, preferably in information security." Preferred Certifications: list many. We'll put these in Qualifications section as

      • items. Now Skills: Behavioral Skills, Technical Skills, Tools Knowledge. Behavioral Skills list: "Coaching and Mentoring, Creativity & Innovation, Decision Making, Leadership Skills, People Management, Planning, Risk-taking" Technical Skills list: "IT Risk Management, IT Controls, Cyber Attack Mitigation, Enterprise IT Management, Network Security, Service Level Maintenance, Information Security Strategy Continuity, Threat Modelling, Information Security Strategy Standards (SOX, ISO 27001/27002, COBIT, ITIL, NIST, PCI)" Tools Knowledge: "Microsoft Office Suite, Security Tools - CSPM, CWPP, CDR, CNAPP, SIEM, EDR, Email Security Gateway, SOAR, Firewall, Anti-virus, Firewalls, VPN IDS/IPS, AV, proxies, etc., Security Testing Tools - Open Source and COTS security tools, Threat Intelligence Tools, Vulnerability Testing Tools" We'll put each as list items maybe grouped? Could separate into subheadings but not allowed; only headings as per list. We could just put all skills under Skills section as list items. Now Benefits: "What Cencora offers" paragraph: "We provide compensation, benefits, and resources that enable a highly inclusive culture and support our team members’ ability to live with purpose every day. In addition to traditional offerings like medical, dental, and vision care, we also provide a comprehensive suite of benefits that focus on the physical, emotional, financial, and social aspects of wellness. This encompasses support for working families, which may include backup dependent care, adoption assistance, infertility coverage, family building support, behavioral health solutions, paid parental leave, and paid caregiver leave. To encourage your personal growth, we also offer a variety of training programs, professional development resources, and opportunities to participate in mentorship programs, employee resource groups, volunteer activities, and much more. For details, visit https://www.virtualfairhub.com/cencora" We need to remove the link? The instruction: remove application instructions; but this is a link for details; maybe considered boilerplate? It's not application instruction but still a link. Might be considered navigation? Safer to keep the descriptive text but drop the URL? The instruction: "Remove cookie/navigation/legal/EEO/equal-opportunity/scam-warning boilerplate, duplicated lines, and application instructions." The link is not exactly those; but it's a reference for details. Might be considered navigation? I'd keep the sentence but maybe drop the URL as it's navigation. However we need to preserve ALL substantive information; the URL is substantive? It's a reference for details; could be considered navigation. Safer to keep the sentence without the URL? The instruction says remove navigation; the URL is navigation. So we can omit the URL but keep the sentence "For details, visit". But that still implies a link. Might be better to drop the whole sentence "For details, visit https://www.virtualfairhub.com/cencora". That's navigation/application instruction? It's not application but still a reference. I'd drop it to be safe. Thus Benefits section will have paragraphs describing benefits. Now Pay: "Full time Salary Range* $141,600 - 283,250 This Salary Range reflects a National Average for this job. The actual range may vary based on your locale. Ranges in Colorado/California/Washington/New York/Hawaii/Vermont/Minnesota/Massachusetts/Illinois State-specific locations may be up to 10% lower than the minimum salary range, and 12% higher than the maximum salary range." We'll put that in Pay section as

        . Schedule: "Full time" indicates schedule. We'll put Schedule section with

        Full-time. Now ensure we don't repeat job title as heading. Not needed. Now produce HTML fragment:

        About the role

        ...

        Responsibilities

        • ...
        • ...

        Qualifications

        • ...
        • ...

        Skills

        • ...
        • ...

        Benefits

        ...

        Pay

        ...

Similar jobs