AI Transformation & Automation (Core Mandate)
- Champion the AI transformation of the infrastructure and network security function with a clear mandate: identify, build, and deploy AI agents that eliminate manual toil and scale team productivity by 10x
- Inventory every manual and repetitive workflow across the platform portfolio—vulnerability triage, scan scheduling, PAM access reviews, asset reconciliation, segmentation policy recommendations, compliance evidence gathering, executive reporting—and build an AI automation roadmap to systematically replace them
- Build and maintain AI agents that perform work traditionally done by analysts: triaging vulnerability findings with risk-based prioritization, generating microsegmentation policy recommendations based on traffic analysis, automating privileged access certifications, and producing cyber hygiene dashboards and reports
Hands-On Technical Execution & Engineering
- Own and operate the team’s security platform portfolio: microsegmentation (Guardicore), ZTNA/SASE (Cisco Secure Access), vulnerability management (Qualys VMDR), privileged access management (PAM), asset intelligence (Axonius), email security, and database security platforms
- Architect and implement network security solutions including segmentation strategies, ZTNA policies, secure access configurations, and least-privilege network controls
- Drive the cyber hygiene program including vulnerability scanning, patch validation, configuration compliance, and asset inventory accuracy—increasingly through AI agents rather than manual processes
Team Leadership & Development
- Build and lead a high-performing infrastructure and network security team
- Develop team capability through pairing on technical work, not just delegating—coach team members while solving problems together
- Drive the team’s evolution from platform operators to AI-augmented security engineers who build and maintain the agents that do the operational heavy lifting
- Know when to roll up your sleeves and execute directly versus when to invest time developing someone else’s skills
Strategic Program Execution
- Drive execution of the infrastructure and network security roadmap including platform upgrades, AI agent deployments, capability enhancements, and tool consolidations
- Develop detailed project plans with milestones, dependencies, and resource allocation—proactively, not upon request
- Lead multiple concurrent strategic initiatives (e.g., microsegmentation expansion, PAM maturity, Qualys coverage optimization, ZTNA migration, AI agent rollout) while maintaining velocity and quality
Cyber Hygiene & Asset Management
- Own the enterprise cyber hygiene program: vulnerability management lifecycle, patch compliance tracking, configuration drift detection, and security baseline enforcement—with AI agents handling the bulk of triage, prioritization, and reporting
- Drive accountability for remediation SLAs across technology teams using data from Qualys and Axonius, with AI-generated escalation recommendations and trend analysis
- Maintain authoritative asset inventory through Axonius, ensuring coverage and accuracy across endpoints, servers, cloud workloads, and network devices
- Produce executive-level reporting on cyber hygiene posture, vulnerability aging, and remediation trends—increasingly auto-generated by AI agents with human review
- Support audit and compliance activities related to infrastructure and network security controls (FFIEC, PCI DSS, GLBA)
Required Qualifications
Experience
- 8+ years of progressive experience in information security or network engineering with at least 3 years in technical leadership roles where you personally built solutions while managing teams
- Recent hands-on work with network and infrastructure security platforms—not just oversight. You should be able to configure a segmentation policy, build a Qualys scan profile, design a PAM workflow, or troubleshoot a ZTNA connectivity issue without handing it off
- Demonstrated experience building or deploying AI/automation solutions in a security context—this could include AI-powered triage workflows, LLM-based investigation agents, automated compliance pipelines, or similar. Candidates who have not yet worked hands-on with AI in security must demonstrate strong aptitude and a concrete vision for how they would approach it
Technical Knowledge
- Deep expertise in network security architecture including microsegmentation, ZTNA/SASE, firewalls, email security, and network access control
- Strong hands-on experience with vulnerability management platforms (Qualys or equivalent) including scan configuration, asset grouping, reporting, and remediation workflows
- Experience with privileged access management solutions (CyberArk, BeyondTrust, Delinea, or equivalent) including vault architecture, session management, and credential rotation
- Familiarity with asset intelligence and cyber asset management platforms (Axonius or equivalent) for coverage gap analysis and security hygiene enforcement
Required Focus Areas
- AI-Driven Security Operations: Building and deploying AI agents that automate security workflows at scale—vulnerability triage, policy recommendations, access reviews, compliance evidence gathering, and executive reporting. Experience designing agent architectures that integrate with security platforms, establishing validation and human-in-the-loop frameworks, and measuring automation ROI. This is the defining capability of this role.
- Zero Trust & Network Segmentation: Designing and implementing zero trust frameworks including microsegmentation, least-privilege network access, continuous verification, and SASE/ZTNA architectures. Experience translating zero trust principles into practical network policies and enforcement points.
- Vulnerability Management & Cyber Hygiene: Hands-on experience owning enterprise vulnerability management programs end-to-end—scan operations, risk-based prioritization, remediation tracking, SLA enforcement, and executive reporting. Experience driving accountability for cyber hygiene outcomes across technology teams.
- Privileged Access & Database Security: Experience designing and operating PAM solutions including vault architecture, credential management, session recording, and just-in-time access. Familiarity with database security controls including activity monitoring and access governance.