Director, Security Engineering

This position is listed on behalf of a partner company, who manages all applications and next steps. Our partner is looking for a Director, Security Engineering based in United States.

The Director, Security Engineering will lead the strategy, execution, and evolution of enterprise security engineering and operations within a fast-growing technology environment.
This role combines hands-on technical leadership with team development, security architecture, and operational excellence.
The ideal candidate will drive modern security practices, strengthen cloud protection, and build resilient systems designed to safeguard critical data and infrastructure.
Working across engineering, IT, compliance, and product teams, you will help embed security into technology decisions and development workflows.
This position offers the opportunity to shape security maturity through Zero Trust initiatives, automation, and proactive threat management.
You will play a key role in building scalable defenses, improving incident response capabilities, and enabling secure innovation across the organization.

Accountabilities:

The Director, Security Engineering will oversee security engineering and operations functions while driving strategic initiatives that improve protection, resilience, and operational readiness. This role requires a balance of technical depth, leadership capability, and the ability to influence security practices across a complex technology landscape.

• Lead, mentor, and develop a high-performing security engineering team through technical guidance, coaching, planning, and continuous improvement.
• Own enterprise security engineering and security operations strategies, ensuring effective protection of systems, applications, infrastructure, and sensitive data.
• Drive the transition toward Zero Trust Architecture principles by strengthening identity controls, reducing lateral movement, and improving security boundaries.
• Oversee security operations programs, including managed detection and response partnerships, monitoring, threat detection, alert management, and incident response processes.
• Design and implement strategies to minimize security impact through segmentation, access controls, workload identity management, and containment capabilities.
• Develop and maintain security frameworks, operational playbooks, threat response procedures, and technical documentation.
• Establish risk-based vulnerability management practices, including prioritization frameworks, remediation processes, and security improvement initiatives.
• Partner with engineering teams to integrate security into development workflows, CI/CD pipelines, and secure-by-design practices.
• Collaborate with IT, governance, risk, compliance, and product teams to ensure security policies align with business and technology objectives.
• Evaluate emerging technologies, including AI-enabled security solutions and automation opportunities, to improve operational efficiency.
• Build executive-level security reporting, metrics, and maturity assessments to communicate risks and progress effectively.
• Manage external security vendors and ensure strong performance across outsourced security services and technology partnerships.

The ideal candidate is an experienced security leader with a strong background in cybersecurity, cloud security, and security operations. They should combine technical expertise with strategic leadership skills and the ability to communicate complex security concepts across an organization.

• 10+ years of experience in cybersecurity, cloud infrastructure security, security engineering, or security operations.
• 3+ years of experience leading, managing, or mentoring security engineering teams.
• Proven experience managing incident response programs and external security partners, including MDR/SOC providers, SIEM, and EDR/XDR platforms.
• Strong expertise in cloud security architecture, preferably with experience in GCP or similar cloud environments.
• Hands-on experience designing security controls such as micro-segmentation, workload identity solutions, and secure CI/CD pipelines.
• Deep understanding of Zero Trust frameworks, security maturity models, and modern…