Lead Cyber Security Engineer (HYBRID)

Phantom Staffing; Boston (MA); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Phantom Staffing is looking for a skilled Lead Cyber Security Engineer in Boston, Massachusetts. In this hybrid role, you will drive incident response and be accountable for security engineering solutions and framework optimization.

The successful candidate will have at least 7 years of experience in cybersecurity, a related Bachelor's degree, and hands-on expertise in security technologies. Excellent crisis management and communication skills are essential for this position.

Qualifications

• 7-10+ years of progressive experience in cybersecurity.
• At least 3 years in incident response or security operations leadership roles.
• Industry-recognized certifications like CISSP, CISM, or equivalent.

Responsibilities

• Design, develop, integrate, and test cyber security products.
• Lead internal and cross-functional stakeholder relationships.
• Perform cyber defense incident triage and assess vulnerabilities.

Skills

Cyber Security knowledge

Incident response

Software engineering architectures

Crisis management

Threat analysis

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Master's degree

Tools

SIEM

EDR/XDR

Threat intelligence tools

Forensic tools

Job description

About the job Lead Cyber Security Engineer (HYBRID)

As the Lead Cybersecurity Engineer, you will drive incident response on major incidents with executive-level participants. You will be accountable for security engineering solutions, framework, roadmap, program optimization, process engineering, risk remediation, and mitigation of operational risk in a high-velocity culture by introducing technology, requirements, deliverables, gaps, and systems design. Analyze competitive strategies, cyber technologies, metrics models, and performance indicators.

You will report to the Senior Manager, Cybersecurity.

Primary Accountabilities

• Design, develop, integrate, and test cyber security products.
• Research and implement new security solutions.
• Apply service-oriented security architecture to meet confidentiality, integrity, and availability requirements.
• Perform cyber defense incident triage, assess scope and impact, and identify vulnerabilities.
• Recommend and enable rapid remediation of security incidents.
• Design, develop, and maintain security systems and solutions.
• Lead internal and cross-functional stakeholder relationships, ensuring transparent communication and collaboration.
• Identify, design, and implement automated solutions to address security needs.
• Translate business requirements into technical specifications.
• Establish processes, procedures, solutions, and security artifacts to ensure compliance with internal controls.

Specialized Knowledge & Skills Requirements

• Demonstrated experience providing customer-driven solutions, support or service.
• Solid knowledge and understanding of software engineering architectures, system/software designs, and system deployments.
• Working knowledge of Cyber Security, Cyber Engineering, Computer Science, Software Engineering, Electrical / Computer Engineering.
• Extensive knowledge and understanding of security technologies and application development methodologies.
• Demonstrated experience performing cyber threat analysis, incident response, forensics analysis, penetration testing, and ethical hacking.
• Extensive knowledge and understanding of directory services and identity stores.

Preferred Qualifications

• Experience managing major incidents at large organizations.
• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related field; Master's degree.
• 7–10+ years of progressive experience in cybersecurity, with at least 3 years in incident response or security operations leadership roles.
• Experience directing high-impact cyber incident response efforts in enterprise or government environments.
• Knowledge of incident management frameworks and methodologies (NIST 800-61, ISO 27035, SANS).
• Hands‑on expertise with SIEM, EDR/XDR, threat intelligence, and forensic tools.
• Industry‑recognized certifications include CISSP, CISM, GCIH, GCIM, GCFA, or equivalent.
• Exceptional crisis management.
• Demonstrated ability to communicate complex technical information clearly to executives, business stakeholders, and technical teams.
• Experience leading tabletop exercises, after‑action reviews, and continuous improvement programs.
• Familiarity with compliance and regulatory obligations (e.g., GDPR, HIPAA, PCI‑DSS, SOX).
• Collaborating effectively with cross‑functional stakeholders, third‑party vendors, and government or law enforcement agencies.

Additional Information

• Offer to selected candidate will be made contingent on the results of applicable background checks.
• Offer to selected candidate is contingent on signing a non-disclosure agreement for proprietary information, trade secrets, and inventions.