Sr Security Engineer

Sr Security Engineer in Irving, TX at Lennar

Lennar is one of the nation's leading homebuilders, dedicated to making an impact and creating an extraordinary experience for their Homeowners, Communities, and Associates by building quality homes and providing exceptional customer service, giving back to the communities in which we work and live in, and fostering a culture of opportunity and growth for our Associates throughout their career. Lennar has been recognized as a Fortune 500® company and consistently ranked among the top homebuilders in the United States.

Lennar is seeking an experienced Senior Cloud Security Engineer to design, implement, and operate security capabilities that protect our cloud environments and cloud-delivered platforms. This is a critical technical leadership position that will shape our cloud security strategy as we continue expanding business operations across integrated cloud environments. You'll partner closely with Security Engineering, Architecture, Infrastructure, and application teams to ensure our cloud controls meet rigorous business, risk, and compliance requirements.

A career with purpose.

A career built on making dreams come true.

A career built on building zero defect homes, cost management, and adherence to schedules.

Drive cloud security strategy, roadmap development, and execution across Lennar's cloud environments.

Lead technical planning, design decisions, and implementation of enterprise-grade cloud security controls.

Serve as the technical authority for cloud security architecture and best practices.

Design and implement security controls that enable safe adoption of AI services and AI-assisted workflows, including cloud-hosted AI platforms and SaaS copilots.

Establish comprehensive guardrails for AI usage covering data protection, access control, logging/monitoring, and approved service standards.

Assess and mitigate emerging AI risks including prompt injection, data leakage, model exposure, insecure plugins/connectors, and supply chain vulnerabilities in AI pipelines.

Collaborate with Legal, Privacy, and GRC teams to support AI governance requirements and maintain control evidence.

Build and manage security solutions across IaaS, PaaS, and SaaS environments, including:

• CSPM
  (Cloud Security Posture Management)
• CASB
  (Cloud Access Security Broker)
• CNAPP
  (Cloud-Native Application Protection Platform)
• SSE
  (Security Service Edge)

Ensure consistent deployment, configuration, and monitoring of security tooling across all cloud environments.

Partner with Dev Ops and engineering teams to embed security into CI/CD pipelines and cloud-native platforms.

Implement and support Dev Sec Ops  tooling and practices including SAST/DAST.

Drive remediation of security findings in collaboration with development teams.

Align cloud security controls with legal, regulatory, and compliance requirements.

Develop and enforce cloud security standards, policies, and best practices.

Support internal and external audit requests and lead remediation efforts.

Participate in security incident response activities, including investigation and post-incident analysis.

Provide guidance to enhance detection, logging, and response capabilities for cloud environments.

Mentor junior engineers and provide technical guidance across security engineering and operations teams.

Foster a culture of security awareness and continuous improvement.

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field required;
Master's degree preferred.

5+ years of cloud security engineering experience in mid-to-large enterprise environments (1,000+ employees).

5+ years securing public cloud platforms (AWS and/or Azure; Oracle Cloud Infrastructure a plus).

3+ years implementing Dev Sec Ops  practices and SDLC security, including SAST/DAST and vulnerability remediation.

Demonstrated experience securing major SaaS platforms (Microsoft 365, Salesforce, Box) using CASB/CSPM or similar technologies.

One or more of the following:

CISSP, CCSP, CCSK

Azure Security Engineer Associate

AWS Certified Security - Specialty

Advanced knowledge of cloud network security fundamentals including VNET/VPC architecture, WAF, and cloud firewalls/FWaaS.

Experience with SIEM and logging platforms such as Microsoft Sentinel, Splunk, or Exabeam.

Proficiency with vulnerability management tools including Rapid7, Qualys, or Nessus.

Deep understanding of cloud and application threats, secure coding practices, and OWASP Top 10.

Ability to assess security maturity and develop improvement roadmaps using CSA models, SAMM, or similar frameworks.

Expertise in creating architecture and design…