Lead Security Engineer
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Lead Security Engineer designing and automating CBIZ’s enterprise security controls across cloud, identity, endpoint, network, email, and data protection. Strengthening security posture through platform engineering, detection, and response support.
Responsibilities:
- Design, implement, harden, integrate, and continuously improve CBIZ’s enterprise security technologies and controls across cloud, identity, endpoint, network, email, and data protection domains
- Engineer secure-by-default configurations, technical guardrails, scalable security solutions, and platform capabilities across hybrid and multi-cloud environments
- Translate business, compliance, and security requirements into practical engineering designs and sustainable technical solutions
- Evaluate architectures, identify control gaps, and implement improvements that strengthen security posture and operational resilience
- Partner with infrastructure, cloud, networking, systems, endpoint, GRC, IT, and business teams to embed security into platforms and workflows
- Engineer controls for identity protection, phishing defense, DLP, conditional access, privileged access, tenant security baselines, and cloud workload protection
- Support and troubleshoot certificate-based authentication, encryption, and PKI-related services
- Build, administer, and improve SIEM, SOAR, XDR/EDR, network, zero trust, CASB, DLP, identity, email, and collaboration security platforms
- Develop automation using PowerShell, Python, Bash, APIs, and workflow tooling
- Design and optimize log collection, parsing, normalization, retention, access models, detections, correlation logic, alerting thresholds, and detection content
- Validate detections and controls through testing, simulation, tuning, and gap analysis
- Contribute to complex investigations and incident response, including root cause analysis, containment support, and remediation validation
- Participate in on-call or escalation support for significant incidents or high-priority technical issues
- Own technical initiatives from design through implementation, support, optimization, and documentation
- Create architecture diagrams, standards, SOPs, runbooks, playbooks, and knowledge base content
- Define and track improvements in platform health, control coverage, alert quality, automation effectiveness, and engineering maturity
- Provide technical guidance and mentorship to analysts and engineers and communicate technical decisions and remediation priorities to stakeholders
Requirements:
- College Degree or equivalent required
- 8 years related experience
- Expert technical knowledge
- Knowledge of industry regulations
- Ability to lead and coordinate team activities
- Ability to formulate, document, and recommend policies and procedures
- Ability to work in and lead a team
- Demonstrated verbal and written communication across all organizational levels
- Ability to travel as required by business and provide on-call availability
- 10+ years of experience in information security, security engineering, infrastructure security, or closely related technical roles is preferred
- Hands-on expertise designing, implementing, and supporting enterprise security technologies across cloud, identity, endpoint, network, email, and data protection domains
- Experience securing Azure and/or AWS environments and operationalizing Microsoft 365 security capabilities
- Experience securing and supporting Azure Virtual Desktop environments
- Working knowledge of PKI, certificate-based authentication, and encryption
- PowerShell proficiency required; Python and/or Bash preferred
- Experience with SIEM, SOAR, XDR/EDR, log pipelines, and platform integrations
- Understanding of networking, identity and access management, operating systems, endpoint behavior, logging and telemetry, and common attack techniques
- Security certifications such as CISSP, GIAC, Azure/AWS security certifications, or other relevant credentials are preferred
- Knowledge of TCP/IP, VLANs, routing, packet analysis, DNS, HTTP/S, SMTP, and LDAP
- Experience supporting Windows and Linux systems, Active Directory, NTLM, Kerberos, domain services, and systems hardening
- Advanced SIEM content engineering experience with correlation logic, custom parsers, rule tuning, dashboards, KQL, SPL, or equivalent tools
- Advanced automation experience using PowerShell and Python, including API integrations, orchestration, data transformation, workflow design, and scalable operational automation
Similar Jobs
Security Engineer, IAM
Security Engineer governing identity access, privileged reviews, remediation, and exceptions. Supporting audit-ready IAM operations for a U.S.-based organization.
Atlassian Platform Specialist – Jira, Confluence
Atlassian specialist rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing testable requirements and delivering video and live industry demonstrations.
Atlassian Consultant – Requirements Capture, Demonstration, Security Clearance
Atlassian consultant rebuilding NATO’s Jira-Confluence cyber operations platform as a working mock-up. Capturing AQAP-compliant requirements and demonstrating the replacement capability to industry.
Defense Information Systems Security Officer – Cloud
Cloud ISSO securing U.S. Marine Corps modernization through RMF, Azure, containers, and AI security. Developing ATO artifacts and monitoring compliance for mission-critical workloads.
Senior Security Professional
Senior security professional managing Honeywell Aerospace access control, CCTV, and cybersecurity systems. Implementing physical security infrastructure, incident response, cloud security controls, and Unified Access strategies.
RACF Mainframe Security Engineer
RACF Mainframe Security Engineer securing Huntington Bank’s IAM capabilities and mainframe technologies. Leading RACF operations, incident response, architecture alignment, and security engineering delivery.
AI Pipeline Engineer – Security Automation Platform
AI Pipeline Engineer building reliable threat-intelligence automation for CloudLinux's Imunify360 security platform. Operating large-scale releases, quality gates, observability and rollback systems.
Cybersecurity Research Expert – Offensive Security, Vulnerability Research
Cybersecurity research expert evaluating frontier AI systems’ exploit analyses and vulnerability reasoning. Providing structured feedback and benchmarks for advanced AI security capabilities.
Director, Physical Security
Director building physical and organizational security for Orcrist’s petabyte-scale B2B data intelligence platform. Managing classified-work protection, sites, personnel security, crisis response, vendors, and regulatory compliance.
Security Consultant
CyberArk Conjur Engineer securing secrets management for Atos’s AI-powered digital services. Designing integrations, automation, and operational support across Kubernetes, cloud, and DevSecOps environments.
Identity Security Specialist
Identity Security Specialist securing identity lifecycles, authentication, and IAM controls for Ascension, a nonprofit Catholic healthcare system. Leading modernization, audits, integrations, and Tier 3 support.
Space Systems Security Architect
Lead architect securing satellite, ground, and user systems for Dragonfli Group’s cybersecurity consulting clients. Driving scalable product architecture, integration, compliance, and mission-readiness across commercial space deployments.
Staff Cloud Security Engineer
Staff Cloud Security Engineer hardening AWS infrastructure and CI/CD for Beyond Finance, helping Americans escape crippling debt. Owning Wiz-based cloud security and vulnerability management.
Cybersecurity Co-Founder / CCO
Cybersecurity co-founder owning and scaling a startup with EWOR, a venture builder supporting entrepreneurs through founder coaching, hiring, distribution, and funding.
Infrastructure & Security Engineer
Infrastructure & Security Engineer securing Microsoft 365, Azure, and client environments for Mechanicus, a security-focused managed service provider. Leading incident response, cloud engineering, hardening, and Tier 3 escalations remotely across the US.
Facility Security Officer
Facility Security Officer managing personnel clearances, facility security, and compliance for AppGate's federal Zero Trust cybersecurity platform. Supporting cleared defense programs, audits, and classified information protection.
IT Security Engineer
IT Security Engineer supporting security operations, incident response, and GRC for CONMED, a global medical device company. Contributing to regulated product security, audits, risk tracking, and compliance reporting.
Security Project Manager
Security Project Manager leading Nasstar’s Telecoms Security Act and Ofcom compliance. Validating technical controls, assessing risks, and coordinating regulatory assurance across UK telecoms operations.
AI Security Consultant
AI Security Consultant helping PA Consulting clients secure LLMs, agentic systems and cloud environments. Designing practical controls, threat models and responsible AI-enabled security operations.
Senior Director, Cybersecurity GRC
Senior cybersecurity GRC leader modernizing governance, risk, compliance, and resilience programs at MoneyGram. Scaling automation and global teams for a regulated fintech organization.