DIRECTOR OF SECURITY ENGINEERING (REMOTE)

Compass Group USA; Atlanta (GA); Remote; USD 180,000 - 200,000; Full time

Benefits offered by this job

Medical

Dental

Vision

Retirement Plan

Paid Time Off

Discount Marketplace

Employee Assistance Program

Commuter Benefits

Job summary

Compass Group USA seeks a Director of Security Engineering to own strategy and execution for security across cloud, infrastructure, and detection engineering. You will lead a multi-team organization, set the technical roadmap for security controls across multi-cloud environments, and oversee tooling and vendor relationships.

The role partners with Incident Management, Identity Management, Exposure Management, Security Architecture, and other technology teams to advance security programs and

Qualifications

• 10+ years in cybersecurity/IT
• 5+ years managing engineering teams
• 2+ years leading managers or senior tech leads
• Bachelor’s degree or equivalent work experience
• Proven enterprise-scale security engineering experience across cloud/infrastructure/detection

Responsibilities

• Lead Security Engineering across Cloud, Infrastructure, and Detection.
• Recruit, develop, retain technical talent and conduct performance appraisals.
• Own multi-year security engineering roadmap and budgets.
• Manage security vendor portfolio and tool lifecycle end-to-end.
• Collaborate with IT and security teams to drive security initiatives.
• Present posture and metrics to senior leadership.
• Oversee security controls across AWS, GCP, and Azure.
• Direct endpoint, network security, and vulnerability management health.

Skills

Security leadership

Engineering management

Cloud security

Threat detection

Security governance

Education

Bachelor’s degree in Computer Engineering or related field

Tools

CrowdStrike

Zscaler

Microsoft 365

SIEM/EDR tooling

Job description

Compass Technology

Salary : $180,000-$200,000 + bonus eligible

Compass Technology is a dedicated internal team for Compass Group delivering enterprise-wide initiatives that support our diverse customer base and enhance our business operations. Our domain encompasses a vast spectrum of opportunities, from hands-on desk support to Cybersecurity, Cloud Engineering, AI, and Modern Application development. We are committed to building robust IT infrastructures, driving digital transformation, and much more.

Job Summary

Reporting to the Sr. Director of Cybersecurity within Compass Group North America, the Director of Security Engineering owns the strategy, leadership, and execution of Compass Group’s security engineering functions across cloud security, infrastructure security, and detection engineering. Leading a multi-team organization, the Director sets the technical roadmap for security controls across cloud environments and the security tooling and infrastructure underpinning our security operations.

The role owns the health and effectiveness of our security tooling, the detection engineering function that turns telemetry into high-fidelity, actionable signals, and the cloud security capabilities that deploy and maintain controls across our multi-cloud footprint. It is highly collaborative, partnering closely with the Incident Management, Identity Management, Exposure Management, Security Architecture, and Security Administration teams within the CISO Office, and with technology teams across Compass Group North America.

Job Responsibilities

• Lead the Security Engineering organization (Cloud Security, Infrastructure Security, and Detection Engineering) through managers and individual contributors, setting organizational, team, and individual goals aligned to security objectives.

• Recruit, develop, and retain technical talent: build clear career paths, mentor managers and engineers, and conduct performance appraisals.

• Own the multi-year security engineering roadmap, shaping capabilities, methods, and investment priorities.

• Own the security vendor portfolio: tool consolidation and rationalization, procurement, renewals, licensing and budget alignment, support escalations, roadmap influence, and quarterly business reviews. Hold vendors and tools accountable to measurable outcomes and manage tool lifecycle end to end.

• Partner across IT, infrastructure, application, and sector technology teams to advance security engineering projects, and lead or support initiatives sponsored by security, technology, and business teams.

• Present posture and metrics to the CISO Office and senior technology leadership; serve as executive-level subject matter expert on security engineering, cloud-native controls, and defensive engineering.

• Direct the design, deployment, and operation of security visibility and control mechanisms across AWS, GCP, and Azure, including validating adherence through regular monitoring and audits.

• Own the technical direction and operational health, availability, coverage, performance, and patch management of the endpoint, network security, and vulnerability management platform stack.

• Own SIEM, SOAR, and security telemetry platform strategy: log source prioritization, ingestion optimization and filtering, consumption management, and platform health and efficiency.

• Mature detection engineering as a discipline: use cases mapped to recognized adversary frameworks such as MITRE ATT&CK, detection-as-code with version control and testing, tuning, and coverage measurement.

• Drive event prioritization and cross-tool correlation to reduce false positives, in collaboration with the Incident Management team.

• Direct and advance automation development supporting incident management and other security capabilities, and ensure the health, optimization, and intended results of workflows.

• Remain available for escalation during significant security incidents and major security platform disruptions.

Job Qualifications

• 10+ years across cybersecurity and information technology, including 5+ years managing engineering teams and 2+ years leading managers or senior technical leads.

• Bachelor’s degree in Computer Engineering, Computer Science, Information/Cybersecurity, or equivalent work experience.

• Proven experience building or maturing enterprise-scale security engineering functions across cloud security, infrastructure security, and detection engineering, including securing medium to large enterprise infrastructure.

• Deep, current experience designing, implementing, and securing cloud infrastructure in one major platform (AWS, GCP, or Azure), with working knowledge of a second.

• Strong knowledge of cloud security principles and industry standards (NIST, ISO 27001, CIS).

• Demonstrated ownership of enterprise security tooling, including SIEM, EDR, and web content filtering strategy.

• Strong analytical and problem-solving skills, with the ability to assess risk, prioritize competing initiatives, and lead through ambiguity in a decentralized organization.

• Excellent written and verbal communication, project management, and documentation skills, with the ability to present security concepts to technical and non-technical audiences.

Preferred Qualifications

• Broad experience with platforms such as Google SecOps, CrowdStrike, Zscaler, Microsoft 365, vulnerability management, and privileged access management, or equivalents.

• Industry certifications (CISSP, CCSP, CISA, CISM, GCIA, GCIH, or cloud security specialty credentials).

• Experience in a large, highly distributed enterprise environment.

Compass Group is an equal opportunity employer. At Compass, we are committed to treating all Applicants and Associates fairly based on their abilities, achievements, and experience without regard to race, national origin, sex, age, disability, veteran status, sexual orientation, gender identity, or any other classification protected by law.

Qualified candidates must be able to perform the essential functions of this position satisfactorily with or without a reasonable accommodation. Disclaimer: this job post is not necessarily an exhaustive list of all essential responsibilities, skills, tasks, or requirements associated with this position. While this is intended to be an accurate reflection of the position posted, the Company reserves the right to modify or change the essential functions of the job based on business necessity. We will consider for employment all qualified applicants, including those with a criminal history (including relevant driving history), in a manner consistent with all applicable federal, state, and local laws, including the City of Los Angeles’ Fair Chance Initiative for Hiring Ordinance, the San Francisco Fair Chance Ordinance, and the New York Fair Chance Act.

Compass Technology maintains a drug-free workplace.

Applications are accepted on an ongoing basis.

Associates at Corporate are offered many fantastic benefits.

• Medical

• Dental

• Vision

• Life Insurance/ AD

• Disability Insurance

• Retirement Plan

• Paid Time Off

• Holiday Time Off (varies by site/state)

• Associate Shopping Program

• Health and Wellness Programs

• Discount Marketplace

• Identity Theft Protection

• Pet Insurance

• Commuter Benefits

• Employee Assistance Program

• Flexible Spending Accounts (FSAs)

• Paid Parental Leave

• Personal Leave

Associates may also be eligible for paid and/or unpaid time off benefits in accordance with applicable federal, state, and local laws. For positions in Washington State, Maryland, or to be p formed Remotely, click here (https://www.compass-usa.com/wp-content/uploads/2023/08/2023_WageTransparency_CorpAndFoodbuy.pdf) or copy/paste the link below for paid time off benefits information.

https://www.compass-usa.com/wp-content/uploads/2023/08/2023_WageTransparency_CorpAndFoodbuy.pdf

Certain positions may require Florida Level 2 background screening. Details: https://info.flclearinghouse.com/