Lead Cybersecurity Engineer

Diversified Services Network, Inc.; Peoria (IL); Híbrido; USD 155.000 - 160.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

401(k)

Dental insurance

Vision Insurance

Disability insurance

Employee assistance program

Health insurance

Health savings account

Life insurance

Paid time off

Paid Holidays

Descripción de la vacante

Diversified Services Network, Inc. (DSN) seeks a full-time Lead Cybersecurity Engineer to drive Security by Design, secure SDLC, and secure cloud environments (AWS/Azure) across IaC and applications.

You will partner with development teams, manage vulnerability programs, and mentor engineers within a larger security org. Hybrid work with 1 onsite day/week, competitive benefits, and growth opportunities in a Fortune 100 company.

Formación

• Bachelor's degree in Computer Science or related field with 8+ years of information security experience OR
• Master's degree with 6+ years of experience in information security

Responsabilidades

• Security Defect Management: analyze, validate, communicate, and consult on defects identified through automated/manual sources.
• Engineering Consulting: advise software engineers, document decisions and architectures, navigate review processes.
• Tool Enablement: monitor automated defect detection tooling at repository/application level.
• Security Test Onboarding & Management: collect scope/access info for testing and manage outputs of assessments.

Conocimientos

Application security

Threat modeling

Vulnerability assessment

Cloud security

CISSP

Java

Python

JavaScript

Automation scripting

AI fluency

Educación

Bachelor's degree in Computer Science or related

Master's degree

Herramientas

CodeQL

Rapid7

Descripción del empleo

Lead Cybersecurity Engineer

Diversified Services Network, Inc. (DSN) is seeking a full-time Lead Cybersecurity Engineer to join our team in your choice of our Peoria, IL, Chicago, IL, or Dallas, TX facilities. We offer a hybrid work model with 1 day of onsite work per week, full benefits, PTO, 401k, and more! If you're looking to grow your career within an extremely reputable, stable Fortune 100 company - let's talk!

Position Overview

As a Lead Cybersecurity Engineer, you will contribute to Security by Design practices, secure application software development lifecycle practices, security testing and assessment, and the integration of security with DevOps. This role is responsible for security engineering of cloud environments (AWS, Azure) and vulnerability management across both Infrastructure as Code (IaC) and application development (SAST/DAST). You will help development teams identify and track security risks to remediation while embracing concepts of agile delivery and DevOps.

Key Responsibilities

• Security Defect Management: Analyze, validate, communicate, and consult on security defects identified through automated and manual sources such as CodeQL, Rapid7 Web Application Security, penetration testing, and bug bounty programs, serving as a partner to software engineers who need accurate information on why a vulnerability exists and how to address it.
• Engineering Consulting: Serve as a trusted resource to software engineers, architects, product owners, and leaders, providing contextually-aware guidance to support sound decision-making, documenting decisions and resulting architectures, and navigating relevant review and approval processes when implementing new features or remediating existing issues.
• Tool Enablement: Enable and monitor automated defect detection tooling (CodeQL, Rapid7, etc.) at the repository or application level according to established processes.
• Security Test Onboarding & Management: Collect and communicate required scope and access information for penetration testing and security assurance assessments, and manage the output of these assessments through the defect management process.

Team Collaboration

This role owns a dedicated set of applications and works directly with development teams as part of a larger security engineering organization that sets standards and ways of working for engaging with those teams. You will help development teams identify security gaps in their applications and services and collaborate on solutions that bring services into compliance with enterprise security requirements.

Candidate Requirements

Education & Experience:

• Bachelor's degree in Computer Science or a related field with 8+ years of experience in information security OR
• Master's degree with 6+ years of experience.

Technical Skills (Required):

• Application security expertise, including understanding of vulnerabilities and remediation solutions (OWASP, CWE/CVE, SANS 25).
• Experience with a wide variety of information security processes and principles, such as enterprise security architecture, threat modeling, vulnerability assessment, risk analysis, defense in depth, SDLC and product development processes, identity and access management, API security, and SCA/SAST/DAST.
• Cloud security experience with Microsoft Azure and/or AWS.
• Professional certification such as CISSP, CCSP, GWAPT, GWEB, or AWS Certified Security - Specialty.
• Development experience in Java, Python, .NET, JavaScript, or an equivalent language.
• Experience implementing automation and scripting.
• AI fluency is preferred.

Technical Skills (Desired):

• Web services security experience.
• Additional professional certifications such as CSSLP or GCIH.

Soft Skills:

• Excellent written and verbal communication skills, with a demonstrated ability to communicate highly technical security concepts to non-security audiences.
• Ability to coordinate multiple teams in accomplishing process review and improvement.

• 401(k)

• Dental insurance
• Vision Insurance
• Disability insurance
• Employee assistance program
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Paid Holidays

Salary expectations: 155,000-160,000 per annual