Lead Cybersecurity Engineer

Insight Global; Cincinnati (OH); On-site; USD 150,000 - 200,000; Full time

Job summary

Insight Global is seeking a Lead Cybersecurity Engineer for First Student's Cybersecurity team. This senior individual contributor role designs, engineers, and operates controls across cloud, endpoint, application, and identity environments, leading projects and guiding investigations.

You will mentor junior engineers, coordinate with I&O, Data, and Application teams, drive incident response, and contribute to risk governance while advancing secure design and defense in depth.

Qualifications

• 10+ years IT experience in corporate environments.
• 5+ years in cybersecurity engineering, cloud security or DevOps security.
• Experience in cloud and on-prem environments.
• AWS is a required technology with security engineering focus.
• EDR and incident response experience.
• Scripting in Python or PowerShell (Python preferred).
• Vulnerability management experience and risk-based thinking.
• MDR/Managed Detection & Response experience.
• Knowledge of NIST CSF and CIS Controls.
• Experience mentoring junior engineers and analysts.

Responsibilities

• Lead design, engineering, and operation of cybersecurity controls.
• Own integration of systems into MDR platform and coordinate with MDR provider.
• Mentor junior engineers and conduct peer reviews of work product.
• Contribute to policies and standards on security governance.
• Drive secure design, investigations, and cross-functional collaboration.

Skills

IT experience

Cybersecurity Engineering

Cloud Security

DevOps Security

AWS

EDR

Python/PowerShell

Vulnerability Management

Hybrid Identity

SAST/DAST

MDR/Detection & Response

CrowdStrike Falcon

NIST CSF/CIS Controls

Tools

CrowdStrike Falcon

Job description

Job Description

The Lead Cybersecurity Engineer is a senior individual contributor on First Student’s Cybersecurity team, responsible for the day-to-day design, engineering, oversight, and operation of the controls that protect First Student’s cloud, endpoint, application, and identity environments. The role leads cybersecurity engineering projects, drives detection and response engineering, and serves as a senior technical resource for cybersecurity investigations and cross-functional partnership with I&O, Data, and Application teams.

This is a hands-on practitioner role. The individual is expected to lead engineering execution, mentor junior team members, and provide technical oversight and peer review of the team’s work product within cybersecurity.

Identify and assess

• Perform cybersecurity assessments and technical reviews for new platforms, cloud services, identity/authN/authZ changes, and externally-facing systems.

Securely build and protect

• Engineer and lead operations of cybersecurity controls and cloud security posture management.

Monitor, hunt, and detect

• Own the technical integration of First Student systems and log sources into the managed MDR platform, and coordinate with the MDR provider on detection use cases, scenario-based workshops, and joint investigations.

Respond, recover, and sustain

• Serve as a senior technical lead for cybersecurity incidents, directing investigation, evidence collection, and containment across identity, endpoint, cloud, and email in coordination with I&O and MDR partners.

Govern and manage risk

• Contribute technical content to policies and standards (e.g., Vulnerability Management, cloud security, SDLC).

Lead and coordinate

• Provide technical oversight and peer review of the cybersecurity team’s work product.
• Mentor cybersecurity analysts and junior engineers on cloud cybersecurity, investigations, and secure design; support individual growth plans in coordination with the Senior Director.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 10+ years of IT experience
• 5+ years in Cybersecurity Engineering, Cloud Security, or DevOps Security
• Experience supporting both cloud and on-prem environments
• AWS is a required technology
• AWS Security Engineering (IAM, GuardDuty, Security Hub, CloudTrail, Control Tower, etc.)
• Incident Response / EDR experience
• Infrastructure, Cloud, or DevOps security background
• Python or PowerShell scripting (Python preferred)
• Vulnerability Management experience
• Experience partnering with Infrastructure and Application Development teams
• Ability to work independently and own security initiatives CrowdStrike Falcon
• Microsoft Active Directory / Hybrid Identity
• SAST & DAST (Application Security)
• MDR / Managed Detection & Response experience
• Experience assessing security risks related to AI adoption
• Experience mentoring junior analysts or security engineers
• Knowledge of NIST CSF, CIS Controls, and AWS security benchmarks