Lead Security Engineer - Remote Fridays

CoStar Group; Virginia (MN); Hybrid; USD 147,000 - 247,000; Full time

Benefits offered by this job

Healthcare

401K

Tuition reimbursement

Employee stock purchase plan

Job summary

CoStar Group is seeking a Lead Security Engineer to drive incident response, threat detection, and security architecture across the CoStar Enterprise. You will coordinate incident handling and lead remediation efforts with multiple teams across locations.

The role requires hands-on experience with security tooling, scripting, and CI/CD, and offers a hybrid work arrangement with Arlington or Richmond, VA, enabling impactful contributions to security posture and risk management.

Qualifications

• Bachelor’s Degree from an accredited university.
• 8+ years IT with 5+ years cybersecurity experience.
• Scripting/ programming skills in Perl, Python, PowerShell.
• Experience with Windows Server 2012/2016/2019 and Active Directory.
• Security certifications such as CISSP, CISM, GCIH, GIAC, or equivalent.

Responsibilities

• Coordinate incident response activities across business verticals.
• Develop, mature and lead incident response functions and reporting of findings.
• Lead technical security assessments (network, application, database).
• Develop platform automations to increase efficiency in responding to observed threats.
• Maintain and update the Incident Response Plan.

Skills

Perl

Python

PowerShell

Incident response

Education

Bachelor’s degree

Security certifications (CISSP/CISM/GCIH/GIAC)

Tools

Windows Server

Active Directory

Job description

CoStar Group is seeking a Lead Security Engineer to drive incident response, threat detection, and security architecture across the CoStar Enterprise. You will coordinate incident handling and lead remediation efforts with multiple teams across locations.

The role requires hands-on experience with security tooling, scripting, and CI/CD, and offers a hybrid work arrangement with Arlington or Richmond, VA, enabling impactful contributions to security posture and risk management.