Principal Cybersecurity Engineer

This is a fully remote position, open to applicants in Tennessee.

📋 Description

• Develop, implement, and enhance the organization’s cybersecurity strategy.

• Execute and manage projects that align with business goals.

• Lead and mentor a small team of cybersecurity experts.

• Work collaboratively with technology leadership and engineering teams to incorporate cybersecurity measures, risk management, and business continuity plans into cloud operations.

• Stay updated on emerging cyber threats and technology trends to adjust security strategies accordingly.

• Oversee budgets for security tools and maintain vendor relationships.

• Define and present key security metrics to leadership.

• Spearhead security engineering projects, including architecture assessments and secure design practices.

• Supervise penetration testing, vulnerability management, and adversary emulation efforts.

• Direct activities related to anomaly and threat detection.

• Collaborate with infrastructure and cloud teams to integrate security into technology workflows.

• Manage alert escalations and implement the incident response plan.

• Act as the escalation point for critical incidents, including after-hours responses.

• Investigate incidents, determine root causes, and implement corrective actions.

• Oversee the design and implementation of security architectures, detection and alerting systems, endpoint security policies, and cloud-native automation solutions.

• Evaluate and suggest security technologies, tools, and methodologies.

• Ensure adherence to cybersecurity regulations and standards.

• Develop the cybersecurity governance strategy for compliance audits.

• Consult with legal and compliance teams regarding cybersecurity-related regulatory requirements.

⛳️ Requirements

• Bachelor’s or advanced degree in Cybersecurity, Information Technology, or a related field.

• 8+ years of practical experience in cybersecurity engineering, focusing on cloud environments, incident detection/response, and network defense.

• Proven expertise in cybersecurity frameworks, risk management processes, and regulatory compliance.

• Excellent communication and leadership skills, including the ability to convey complex security concepts to non-technical audiences.

• Track record of succeeding in uncertain environments through critical thinking, quick adaptation, and a dedication to continuous learning.

• Preferred: Active security certifications (e.g., CISSP, CSSP, or equivalent).

• Preferred: Technical certifications in cloud platforms (e.g., AWS, Azure, Microsoft 365).

• Preferred: Practical experience with SDLC processes and related technologies.

• Preferred: Demonstrated skill in deploying and securing AI-driven solutions.

• Currently, we are not recruiting from California, Colorado, Connecticut, Maryland, Nevada, New Jersey, Ohio, Rhode Island, Washington, or New York.

🏝️ Benefits

• Less than 10% travel required.

• Equal Opportunity Employer.