Lead Security Engineer

NVR, Inc. is seeking a Lead Security Engineer to work on site in Reston, VA.

NVR's technology teams thrive on providing multiple business lines with the tools and technologies that support NVR's mission to create a better living experience for our customers. Join NVR Technology and be part of a collaborative team that welcomes innovation, encourages continuous learning, and helps you achieve your career goals.

We are seeking a Lead Security Engineer to provide hands-on technical leadership for enterprise security engineering. In this lead individual-contributor role, you will set technical direction, own complex security designs and standards, guide implementation across security platforms and services, and serve as a trusted security partner for major technology initiatives. You will lead through influence, mentor engineers, and help ensure that security controls are practical, consistently implemented, and operating effectively.

• Lead the architecture, design, implementation, and continuous improvement of enterprise security platforms and services.
• Establish technical standards, security baselines, reference designs, configuration requirements, and engineering runbooks across assigned security domains.
• Serve as the security engineering lead for complex projects, translating business and technical requirements into secure, supportable solutions.
• Provide technical ownership for capabilities such as endpoint protection, vulnerability management, privileged access management, cloud and Microsoft 365 security, log management, encryption, secure email, and network security.
• Lead technical risk assessments, design reviews, threat modeling, control validation, and security testing for new and changing solutions.
• Ensure security tools are maintained, integrated, monitored, and configured in accordance with documented standards, current releases, and approved security baselines.
• Provide senior-level support for complex incidents, including technical analysis, containment strategy, remediation leadership, root-cause review, and post-incident improvements.
• Lead vulnerability-management engineering and remediation coordination, including prioritization, exception analysis, trend review, and verification of corrective actions.
• Partner with infrastructure, applications, cloud, architecture, audit, and business teams to embed security throughout the system development lifecycle.
• Evaluate emerging threats, technologies, and products; develop recommendations and present options, risks, and tradeoffs to technology leadership.
• Lead medium-to-large security initiatives and coordinate work across technical teams, vendors, and stakeholders.
• Mentor security engineers, provide technical review and coaching, and promote shared engineering practices across the team.
• Develop meaningful measures for security control health, operational effectiveness, risk reduction, and continuous improvement.

• 8+ years of progressive experience designing, implementing, administering, and improving enterprise information security solutions, including significant responsibility for complex technical initiatives.
• Demonstrated ability to lead security architecture and engineering decisions across multiple enterprise platforms or security domains.
• Deep expertise in several areas such as endpoint security, vulnerability management, privileged access management, cloud security, Microsoft 365 security, SIEM/logging, encryption, email security, network security, or threat management.
• Experience leading incident response, technical investigations, root-cause analysis, and enterprise remediation efforts.
• Strong knowledge of security architecture principles, control frameworks, policies, standards, baselines, audit requirements, and risk-management practices.
• Ability to translate risk into practical technical requirements and balance security, business, operational, and user needs.
• Proven experience leading cross-functional technical projects and influencing outcomes without relying on direct authority.
• Advanced documentation and communication skills, including standards, designs, decision records, procedures, runbooks, executive recommendations, and technical presentations.
• Ability to operate independently, make sound decisions in ambiguous situations, and serve as an escalation point for complex security engineering matters.

• Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology,…