Lead Information Security Engineer

About This Role

This Lead Information Security Engineer role is part of the Cybersecurity team within Technology. It focuses on the identification, development, and prioritization of security events and automated content, requiring experience in the development lifecycle and the ability to research and understand over-the-horizon detection capabilities through automated alerting. The position suits a candidate with a well-rounded understanding of on-premises servers, network, endpoint, and cloud detections, among other broad-range technologies, who can effectively convey observations and development deliverables to a wide audience.

Responsibilities

• Lead operationalization and effectiveness of security content
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Review and correlate security logs
• Utilize subject matter knowledge in industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including managers
• Lead a team to achieve objectives
• Demonstrate proficiency in using AI-assisted development and analysis tools (e.g., Git Hub Copilot and approved code-centric agents)
• Leverage AI to accelerate system design, coding, testing, analysis, and troubleshooting
• Apply strong technical judgment when validating and integrating AI-assisted outputs into solutions
• Understand and account for model limitations, security risks, and operational considerations
• Apply AI responsibly in development and production environments
• Ensure AI usage aligns with security, compliance, privacy, and ethical standards

Requirements

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 2+ years of Regular Expression (regex) experience
• 3+ years of SIEM development experience

Nice to have:

• Advanced Information Security technical skills and understanding of information security practices and policies