Lead Information Security Engineer (Remote)

Our client is seeking an accomplished Lead Information Security Engineer to spearhead its cybersecurity infrastructure and strategy in a fully remote capacity. This senior position requires a visionary leader with extensive experience in designing, implementing, and managing robust security solutions. The Lead Information Security Engineer will be instrumental in protecting the organization's sensitive data, systems, and networks from sophisticated cyber threats. This is a remote-first role, offering significant flexibility and the opportunity to work with a top-tier cybersecurity team from anywhere in the US.

Responsibilities:

• Lead the design, development, and implementation of enterprise-wide security architectures and solutions.
• Oversee the deployment and management of security technologies, including firewalls, IDS/IPS, WAFs, SIEM, endpoint security, and encryption solutions.
• Develop and enforce security policies, standards, and procedures across the organization.
• Conduct thorough risk assessments, vulnerability analyses, and penetration testing.
• Lead incident response planning and execution, coordinating efforts during security breaches.
• Manage security operations, including monitoring, threat hunting, and anomaly detection.
• Evaluate emerging security threats and technologies, recommending appropriate countermeasures.
• Collaborate with IT and development teams to ensure security is integrated into system design and development lifecycles (DevSecOps).
• Mentor and guide junior security engineers and analysts.
• Ensure compliance with industry regulations and data privacy laws.
• Develop and maintain security documentation, runbooks, and incident response playbooks.
• Lead security awareness training programs and promote a security-conscious culture.
• Manage relationships with third-party security vendors and service providers.
• Participate in architectural reviews and provide security guidance on new projects and initiatives.
• Contribute to the overall cybersecurity strategy and roadmap.

Qualifications:

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; Master's degree preferred.
• Relevant security certifications such as CISSP, CISM, GIAC certifications (e.g., GSEC, GCIA, GCIH).
• Minimum of 8 years of progressive experience in information security engineering and architecture.
• Proven experience in designing and implementing secure network architectures, cloud security (AWS, Azure, GCP), and endpoint security.
• Deep understanding of security protocols, threat landscape, and attack vectors.
• Hands-on experience with SIEM, EDR, vulnerability management tools, and scripting languages (e.g., Python, PowerShell).
• Strong leadership capabilities with experience managing technical teams.
• Excellent analytical, problem-solving, and strategic thinking skills.
• Exceptional communication, presentation, and interpersonal skills, with the ability to influence stakeholders.
• Experience in incident response and forensic analysis.
• Familiarity with compliance frameworks like NIST, ISO 27001, PCI DSS.

This is a remote position, with the main coordination originating from our **Phoenix, Arizona, US** office, but open to candidates nationwide.