Security Engineering Lead — Risk, DevSecOps & Cloud

Ferguson Enterprises, Inc.; Newport News, Northern (VA, KY); Hybrid; USD 106,000 - 185,000; Full time

Benefits offered by this job

Health

Dental

Vision

Paid time off

Life insurance

401(k) with company match

Mental health coverage

Gender affirming and family building</

Paid parental leave

Associate discounts

Community involvement opportunities

Job summary

Ferguson Enterprises, LLC. is seeking a Senior Manager of Security Engineering to provide vision and leadership for enterprise security engineering capabilities.

The role requires leading teams responsible for vulnerability management, DevSecOps, penetration testing, edge security, email security, endpoint protection, cloud posture, and configuration risk across Ferguson’s technology landscape. The position emphasizes risk-based decision making, collaboration with multiple security and

Qualifications

• 8+ years in information security, technology risk, or related field.
• Experience leading information security engineering, application security, vulnerability management, cloud security, or related teams.
• Experience building or operating risk-based vulnerability management programs.
• Ability to translate technical findings into business risk and prioritized action.
• Certifications such as CISSP/CISM/CISSP/CCSP are preferred but not required.

Responsibilities

• Lead Security Engineering service areas including vulnerability management, DevSecOps, penetration testing, edge security, email security, and cloud security posture.
• Partner with cross-functional teams to align engineering priorities with enterprise risk reduction.
• Establish metrics and reporting on risk posture, remediation progress, and service value.
• Drive secure-by-default culture and timely remediation across Ferguson technology teams.
• Support strategic initiatives such as AI resilience and post-quantum readiness.

Skills

Leadership

Security engineering

Vulnerability management

Communication

Risk-based decision making

Cloud security

DevSecOps

Penetration testing

Tools

SAST

SCA

Container security

WAF

EDR

CSPM

SIEM integrations

Job description

Ferguson Enterprises, LLC. is seeking a Senior Manager of Security Engineering to provide vision and leadership for enterprise security engineering capabilities.

The role requires leading teams responsible for vulnerability management, DevSecOps, penetration testing, edge security, email security, endpoint protection, cloud posture, and configuration risk across Ferguson’s technology landscape. The position emphasizes risk-based decision making, collaboration with multiple security and