Senior Security Lead, DevSecOps & Incident Response

Hirewell; Itasca (IL); In loco; USD 180.000 - 240.000; Tempo pieno

Descrizione del lavoro

Hirewell is partnering with a growing technology organization in the financial services sector to identify a Senior Security Lead who will own the cybersecurity program across a modern tech environment.

The ideal candidate will drive security strategy, manage risk, and partner with engineering and leadership to implement secure development practices, threat modeling, and incident response. This role emphasizes hands-on security leadership in a regulated industry.

Competenze

• 10+ years of progressive cybersecurity experience with leadership.
• Hands-on with application security, DevSecOps, and secure SDLC.
• Experience with SAST, DAST, and SCA tools.
• Knowledge of threat modeling, API security, OWASP Top 10, microservices, and container security.
• Experience with vulnerability management, remediation, and patching.
• Strong understanding of network security, firewalls, segmentation, WAF, and DDoS protection.
• Experience implementing SIEM and secrets management solutions.
• Incident response programs and security policy development.
• Familiarity with SOC 2 audits, NIST CSF, and compliance requirements.
• Ability to work independently and collaborate with technical and non-technical stakeholders.

Mansioni

• Lead and continuously improve application security practices, including SAST, DAST, and SCA tooling within CI/CD pipelines.
• Partner with engineering teams to implement secure development practices, conduct threat modeling, and identify application and infrastructure risks.
• Own vulnerability management processes, including assessments, remediation tracking, and patch management.
• Oversee security infrastructure, including firewalls, network segmentation, WAF, DDoS protection, SIEM, and secrets management.
• Lead incident response efforts, develop response procedures, and coordinate post-incident reviews.
• Drive security compliance initiatives, including SOC 2 Type I and Type II readiness, policies, procedures, and audit coordination.
• Conduct security assessments and manage relationships with third-party penetration testing providers.
• Establish security policies, access controls, and security awareness practices across the organization.
• Evaluate and implement security tools and technologies to continuously improve the company's security posture.
• Work closely with engineering and leadership teams to identify risks and translate security requirements into practical solutions.

Conoscenze

Application security

DevSecOps

Secure SDLC

Threat modeling

Vulnerability management

Network security

Incident response

SOC 2 / NIST CSF knowledge

Stakeholder collaboration

Security leadership

Formazione

Bachelor's degree in Computer Science / Information Technology / Cybersecurity

Strumenti

SonarQube

Guardicore

Cloudflare

HashiCorp Vault

Descrizione del lavoro

Hirewell is partnering with a growing technology organization in the financial services sector to identify a Senior Security Lead who will own the cybersecurity program across a modern tech environment.

The ideal candidate will drive security strategy, manage risk, and partner with engineering and leadership to implement secure development practices, threat modeling, and incident response. This role emphasizes hands-on security leadership in a regulated industry.