Lead Cybersecurity Engineer

The Lead Cybersecurity Engineer is a senior-level position responsible for overseeing and leading the evaluation, integration, and deployment of new information and data security technology tools and policies across all infrastructure and enterprise system components. As a subject matter expert, the Lead Cybersecurity Engineer provides guidance and mentorship to the team of tier-2 engineers, ensuring that they possess the necessary skills and knowledge to handle complex cybersecurity tasks. In addition to the hands-on technical responsibilities, the Lead Cybersecurity Engineer plays a crucial role in establishing information security policies for various processes. They are accountable for ensuring the successful implementation of these policies across the infrastructure and overseeing internal and external audits to maintain ongoing compliance with various frameworks and regulations. The incumbent in this role utilizes their cross-functional expertise to develop comprehensive plans and strategies for data security, vulnerability management, and log collection. This includes managing rights management, security update compliance, vulnerability assessments, malware protection, intrusion prevention, security monitoring, and external program compliance. Reporting directly to the Manager of Information Security, the Lead Cybersecurity Engineer holds a leadership position within the organization. They provide guidance, direction, and oversight to the cybersecurity team, fostering a collaborative and proactive approach to cybersecurity operations. This position is exempt, reflecting the high level of responsibility and expertise required. Overall, the Lead Cybersecurity Engineer is a key contributor to the organization's cybersecurity posture, ensuring the protection of sensitive information, mitigating risks, and maintaining compliance with regulatory requirements.

Bachelor’s degree in information technology or a related field, or equivalent practical experience is required. Candidates must have a minimum of five (5) years of experience working in an enterprise support environment with information security responsibility. Completion of at least two (2) certifications in recognized security certification paths, such as Microsoft, Cisco, or other Industry standard Security certifications, is mandatory. Preference will be given to candidates who hold the Certified Information Systems Security Professional (CISSP) certification. Additional certifications, such as, Certified in Risk and Information Systems Control (CRISC), Certified Information Systems Auditor (CISA) are highly desirable. Familiarity with regulatory compliance standards including, CJIS, COPPA, FERPA, HIPAA, GDPR, and PCI-DSS is necessary. Possession of a valid Driver’s License is required. Strong organizational and interpersonal skills are essential for this role. The candidate must be able to demonstrate exceptional written and oral communication skills in English. Candidates must be willing to travel to all STOF Reservations, maintain communication with the Information Security Manager and work a flexible work schedule, including evenings, weekends and holidays.