Lead Information Security Engineer

Responsibilities

• Team Leadership and Management: Lead and manage a team of four security professionals, providing direction, technical guidance, mentoring, and support to drive individual development and overall team performance.

• SecOps and Threat Detection: Own and continuously improve incident management processes, ensuring effective investigation, response, and resolution of security incidents.

• Detection and Response: Improve threat detection capabilities, optimize SIEM alerting to reduce noise and false positives, develop and maintain incident response playbooks, and strengthen email security.

• Security Policies and Standards: Develop security guides and define, implement, and monitor security measures to protect Job&Talent’s systems, data, and operations.

• Security Tooling and Processes: Drive the continuous improvement of security tools, processes, and standards to provide consistent security assurance across the business.

• Cloud Security: Use our Cloud Security Posture Management (CSPM) tool to monitor and improve cloud security configurations across AWS, Azure, and Google Cloud Platform.

• Cross-functional Collaboration: Work closely with DevOps teams to integrate security into cloud deployment environments, infrastructure, and CI/CD pipelines.

• Risk Management: Perform risk assessments, threat modeling, and security reviews, ensuring risks are identified, prioritized, and addressed effectively.

• Logging and Visibility: Improve logging, monitoring, visibility, and evidence collection across corporate and production systems.

• Continuous Improvement: Establish best practices, identify opportunities to improve operational efficiency, and ensure the team continuously develops its technical capabilities in response to evolving threats.

Requirements

• 8+ years of experience in SecOps, cloud security, incident response, security engineering, or a similar role.

• 3+ years of experience managing a security team, including mentoring engineers, setting priorities, and coordinating workloads.

• At least 5 years of experience in threat analysis, SIEM alert investigation, detection engineering, noise reduction, and incident management.

• At least 3 years of experience working with CSPM tools.

• At least 5 years of experience working for a cloud-based, global technology product company.

• Hands-on experience with EDR/XDR tools and endpoint investigation.

• Experience with vulnerability management and risk-based prioritization.

• Strong understanding of cloud security principles and experience working with AWS and/or Google Cloud Platform.

• Ability to combine hands-on technical expertise with team leadership, ensuring effective execution while supporting the development of team members.

• Strong communication and collaboration skills, with the ability to work effectively with technical teams and stakeholders across the business.