Lead Security Engineer — Enterprise Security Leader (Onsite)

NVR,; Reston (VA); On-site; USD 135,000 - 155,000; Full time

Job summary

NVR, Inc. seeks a Lead Security Engineer on-site in Reston, VA to provide hands-on technical leadership for enterprise security engineering. You will set direction, own complex designs, and guide security across platforms while mentoring engineers.

This role partners with teams to embed security throughout the SDLC and drive measurable risk reduction. You will own capabilities across endpoint protection, vulnerability management, privileged access, cloud and Microsoft 365 security, encryption,

Qualifications

• 8+ years of progressive experience in enterprise information security.
• Ability to lead security architecture and engineering decisions.
• Deep expertise across endpoint security, cloud security, and IAM.
• Experience with incident response and enterprise remediation efforts.
• Strong knowledge of risk management, standards, and baselines.

Responsibilities

• Lead architecture, design, and improvement of security platforms.
• Establish standards, baselines, reference designs, and runbooks.
• Serve as security engineering lead for complex projects.
• Provide ownership for endpoint protection, vulnerability management, and cloud security.
• Lead risk assessments, threat modeling, and security testing.
• Maintain security tools per standards and updated baselines.
• Support complex incidents with analysis, containment, and remediation.
• Coordinate vulnerability remediation and action verification.
• Partner with teams to embed security into the software lifecycle.

Skills

Security architecture

Incident response

Threat modeling

Cloud security

Microsoft 365 security

Vulnerability management

Endpoint security

Education

Bachelor's degree in Information Security / CS

Tools

Microsoft Azure

SIEM / logging

Zero Trust

Job description

NVR, Inc. seeks a Lead Security Engineer on-site in Reston, VA to provide hands-on technical leadership for enterprise security engineering. You will set direction, own complex designs, and guide security across platforms while mentoring engineers.

This role partners with teams to embed security throughout the SDLC and drive measurable risk reduction. You will own capabilities across endpoint protection, vulnerability management, privileged access, cloud and Microsoft 365 security, encryption,