Cybersecurity Principal

You will translate cybersecurity strategy into technical plans and prioritized workstreams. You will design and implement security architecture and controls across infrastructure and applications, lead core security capability delivery, support incident response and compliance activities, document repeatable operating practices, and advise technical leadership on risk-based decisions.

Responsibilities

• Translate cybersecurity strategy and roadmap into technical plans and workstreams
• Design and implement defense-in-depth architecture across identity, networks, endpoints, cloud, SaaS, data, APIs, CI/CD, and industrial environments
• Establish secure architecture patterns, reference designs, standards, and security-by-default practices
• Lead implementation of SIEM, security monitoring, EDR, vulnerability management, identity governance, and incident-response processes
• Improve identity and access controls
• Build security controls for cloud, SaaS, data, application, and AI or compute environments
• Secure integrations, APIs, CI/CD pipelines, production platforms, and enterprise data
• Support incident-response design and execution
• Lead vulnerability management activities
• Document controls, gather evidence, test effectiveness, and close audit findings
• Develop runbooks, procedures, diagrams, standards, and decision records
• Mentor engineers and technical stakeholders on secure design and incident readiness

Requirements

• 5+ years of progressive cybersecurity or information security experience
• Experience in security architecture, engineering, operations, or a comparable technical leadership role
• Knowledge of security architecture, cloud and SaaS security, IAM, network security, endpoint security, application security, data security, and industrial control environments
• Experience delivering SIEM or SOC, EDR, vulnerability management, incident response, IAM, privileged access, and security monitoring
• Experience securing APIs, CI/CD pipelines, cloud and data architectures, and production systems
• Knowledge of NIST CSF, ISO 27001, SOC 2, SOX ITGC, PCI, or comparable standards
• Technical writing and communication skills
• Experience with security vendors, MSSPs, auditors, and third parties