Lead Cybersecurity Engineer

This position currently follows a hybrid work schedule, with three in-office days. Tuesday and Thursday are Company anchor days, and the third day will be worked out with your manager.

This role establishes a centralized cybersecurity execution capability within IT, ensuring that security is embedded into operations, incident response, and technology transformation initiatives. The position enables the organization to modernize its systems and expand cloud adoption while maintaining a strong, resilient, and well-governed security posture.

The Lead Cybersecurity Engineer is a senior individual contributor responsible for driving cybersecurity execution across the organization. This role ensures that security controls, operational practices, and architectural considerations are effectively embedded across infrastructure, applications, cloud platforms, and data initiatives.

The role connects cybersecurity strategy with execution by translating CIO direction, in collaboration with the vCISO, into actionable controls, while supporting secure modernization across Microsoft 365, data platforms, and enterprise systems.

• Own and drive cybersecurity operations across endpoints, servers, and enterprise systems
• Establish and enforce security baselines, hardening standards, and best practices
• Lead vulnerability management lifecycle including identification, prioritization, and remediation tracking
• Define and monitor patch management compliance in partnership with infrastructure teams
• Continuously assess and reduce organizational attack surface

• Provide security guidance for system upgrades and modernization initiatives
• Participate in architecture reviews and solution design discussions
• Define and promote secure design patterns and standards
• Ensure security is embedded across infrastructure, applications, and data platforms

• Provide security oversight for Microsoft 365, SharePoint, Teams, Power BI, and emerging platforms such as Microsoft Fabric
• Guide implementation of identity, access control, and data protection capabilities
• Enforce Zero Trust principles including strong authentication, least privilege, and device posture validation
• Secure Development and Technology Enablement
• Evaluate security considerations in new technologies, platforms, and integrations

• Promote identity-first security practices across the organization
• Support data classification, data loss prevention, and secure data sharing standards

• Serve as primary coordinator during cybersecurity incidents
• Lead cross-functional response efforts across infrastructure, applications, support, and external partners in coordination with senior company leadership
• Ensure timely containment, remediation, and recovery
• Maintain incident response plans, escalation procedures, and playbooks
• Conduct post-incident reviews and drive corrective actions

• Design and execute cybersecurity tabletop exercises to strengthen organizational preparedness and response capabilities
• Simulate scenarios such as ransomware, phishing compromise, and data breaches
• Identify gaps in response readiness and drive remediation efforts
• Ensure protection of sensitive data across business and analytics platforms
• Manage enterprise security awareness program
• Conduct training, phishing simulations, and targeted campaigns
• Track training completion and effectiveness metrics
• Deliver periodic awareness sessions for employees and IT teams

• Partner with infrastructure, application development, and support teams to embed security practices
• Ensure alignment between operational execution and policies defined by the vCISO and legal teams

• Act as a trusted advisor on cybersecurity best practices
• Advise on application security, code review practices, and vulnerability remediation
• Support evaluation of third-party vendors from a cybersecurity standpoint
• Review…