The Cybersecurity Lead Engineer is a specialized technical role responsible to plan, analyze, design, and integrate processes and platforms used to protect information and mitigate cyber threats. The lead engineer must have a thorough understanding of Information Technology systems to effectively anticipate and remediate risks and possess a well-developed ability to collaborate across functional Information Technology and Cybersecurity areas.

Position Responsibilities

Collaborate with solutions teams and enterprise architect functions to recommend common frameworks and implement designs for protecting data and mitigating technical and non-technical threats.
Gather and document business requirements, threat drivers, and compliance requirements necessary to build and maintain security infrastructure.
Analyze technical specifications and systems architectures to aid in the development of configuration guidelines, operational procedures, and health metrics.
Maintain the system health, configuration and tuning of technical security controls for on-premises and cloud-based security tools and platforms.
Perform threat analysis and recommend remediation steps to resolve complex incidents and events detected by security tool sets.
Perform security architecture review and annual budget planning with operational data and threat metrics for all security tools and platforms.
Identify security design gaps in existing and proposed architectures and recommend changes or enhancements.
Facilitate security innovation through the creation of solutions that balance business requirements with information and cyber security requirements.
Perform analysis of security incidents and events and drive the maturity of process and configuration.
Develop and maintain cyber security infrastructure roadmaps that align to corporate security strategy.
Maintain working knowledge of advanced threat detection as the industry evolves and provide recommendations as appropriate.
Drive regular research, collaboration and advocate for InfoSec technology and service advancement and improvement for CEI and Cox divisions.
Perform all other InfoSec risk assessments, audits, and security incident investigations as required.

Qualifications

BS in technology related field plus 6 years of relevant experience; a Masters and 4 years of experience; or a Ph.D. and one year of experience is required. In lieu of a degree, 18 years of relevant experience will be considered.
Dedicated security engineering and solutions engineering across a variety of business platforms and environments, IT platforms, security platforms, leading frameworks and industry compliance mandates including but not limited to PCI, NIST, Cloud Security, or ISO.
Possess one or more current industry certifications relevant to the job e.g., CISSP, CCSP, CISM, C-RISC, C|CISO, CISA, or SANS certifications.

Experience

In-depth and demonstrable understanding of multiple security disciplines and technologies.
In-depth and demonstrable understanding of cloud security concepts, techniques, and controls.
Demonstrated understanding of API/Web Services, relational database management systems.
Proven track record as an influential member of a security program.

Preferred Experience

Understanding of Key Management Systems and integrations.
Familiarity with automation (e.g. Ansible & Terraform).
In-depth experience working with Linux and Windows based server environments.
Practical experience managing security controls in Microsoft Azure and Oracle Cloud Infrastructure.

Complexity

This person works on multiple projects as a key participant or thought leader.
The role is involved in projects or issues of high complexity that require in-depth knowledge across multiple technical areas and business segments.

Occupational Personality

Ability to work independently and prioritize multiple projects in a highly dynamic environment.
Strong conceptual thinking and communication skills - the ability to conceptualize complex business and technical requirements into comprehensible models and templates.
Team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT and business personnel.
Possess the ability to influence without authority.
Exceptional written and verbal communication skills.

About Cox

Cox empowers employees to build a better future and has been doing so for over 120 years. With exciting investments and innovations across transportation, communications, cleantech and healthcare, our family of businesses - which includes Cox Automotive and Cox Communications - is forging a better future for us all. Ready to make your mark? Join us today!

Benefits of working at Cox may include health care insurance (medical, dental, vision), retirement planning (401(k)), and paid days off (sick leave, parental leave, flexible vacation/wellness days, and/or PTO). For more details on what benefits you may be offered, visit our benefits page .

Cox is an Equal Employment Opportunity employer - All qualified applicants/employees will receive consideration for employment without regard to that individual's age, race, color, religion or creed, national origin or ancestry, sex (including pregnancy), sexual orientation, gender, gender identity, physical or mental disability, veteran status, genetic information, ethnicity, citizenship, or any other characteristic protected by law.

Statement to ALL Third-Party Agencies and Similar Organizations: Cox accepts resumes only from agencies with which we formally engage their services. Please do not forward resumes to our applicant tracking system, Cox employees, Cox hiring manager, or send to any Cox facility. Cox is not responsible for any fees or charges associated with unsolicited resumes.

Cox Enterprises

New Jobs

Cybersecurity Lead Engineer