Manager of Cybersecurity Engineering

The Cybersecurity Engineering Manager will work as part of the IT Security & Compliance organization to lead and oversee the implementation, operation, and continuous improvement of the organization’s cybersecurity engineering capabilities. The ideal candidate will provide leadership over security engineering teams responsible for deploying, operating, and maintaining security technologies across infrastructure, applications, cloud, endpoint, and data environments. This person will partner closely with security architecture, IT infrastructure, application development, and risk and compliance teams to ensure security controls are implemented consistently, operate effectively, and align with approved security designs and business priorities.

They will also collaborate across the organization to drive operational excellence, improve security tooling effectiveness, and ensure engineering efforts scale with the organization’s growth and evolving threat landscape. Other responsibilities include, but are not limited to:

• Lead and oversee the cybersecurity engineering function, including the deployment, operation, and lifecycle management of security technologies across infrastructure, applications, cloud, endpoint, and data environments.
• Provide direction and governance for security engineering initiatives, ensuring security controls are implemented consistently and aligned with approved security architectures, risk priorities, and business objectives.
• Own and maintain security engineering processes, operational standards, runbooks, and procedures to ensure reliability, scalability, and consistency across the organization.
• Oversee the execution and operational effectiveness of security controls implemented by engineering teams, including monitoring, tuning, and continuous improvement of security tooling.
• Manage security engineering platforms and technologies (e.g., SIEM, XDR, EDR, NDR, WAF, cloud security tools), ensuring stability, coverage, and integration across the environment.
• Identify opportunities for improvement and drive enhancements to the maturity, efficiency, and effectiveness of the security engineering and operations function.
• Develop and champion automation and operational efficiency initiatives related to security monitoring, alerting, response, and platform management.
• Serve as an escalation point for significant security incidents, control failures, or operational issues, coordinating response and resolution across security, IT, and business teams.
• Ensure engineering support for incident response activities, including coordination of containment, remediation, and post‑incident improvement efforts.
• Ensure adherence to change management policies and operational standards when implementing or modifying security technologies and controls.
• Provide oversight of security engineering activities during major system changes, deployments, and infrastructure initiatives to ensure continued protection and control integrity.
• Track and report on security engineering metrics, platform health, and operational effectiveness, providing visibility to leadership on risks, trends, and improvement opportunities.
• Mentor, develop, and guide security engineers, fostering technical growth, accountability, and alignment with organizational security goals.
• Collaborate closely with cyber architecture and cyber risk teams to ensure engineering execution aligns with architectural intent and risk management objectives.
• Other projects as assigned.

The successful candidate will meet the following qualifications:

• College or technical school degree is preferred.
• Relevant cybersecurity or technical certifications are preferred (e.g., CISSP, CISM, GIAC, vendor‑specific security certifications).
• Substantial knowledge and experience in the design, implementation, and operation of the following:
• Enterprise security engineering and security operations practices
• Security tooling and platforms (e.g., SIEM, XDR/EDR, NDR, WAF, cloud security tools)
• Security monitoring, detection, and response capabilities
• Infrastructure, application, endpoint, and cloud security controls
• Extensive background in IT infrastructure and applications, with…