B
Sr Technical Lead-Cybersecurity
Job Description
Area(s) of responsibility
Role Summary
We are seeking a highly experienced Cybersecurity professional to lead Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations across the enterprise. The candidate will be responsible for architecting, implementing, and optimizing Tenable Nessus, BitSight, and Infoblox solutions while driving enterprise-wide risk reduction initiatives, vulnerability remediation programs, DNS security, compliance efforts, and cybersecurity governance.
Key Responsibilities
Security Platforms
Role Summary
We are seeking a highly experienced Cybersecurity professional to lead Vulnerability Management, Attack Surface Management, Security Risk Governance, and Security Infrastructure Operations across the enterprise. The candidate will be responsible for architecting, implementing, and optimizing Tenable Nessus, BitSight, and Infoblox solutions while driving enterprise-wide risk reduction initiatives, vulnerability remediation programs, DNS security, compliance efforts, and cybersecurity governance.
Key Responsibilities
- Lead the administration, engineering, and lifecycle management of Tenable Nessus, BitSight, and Infoblox platforms.
- Define and implement enterprise Vulnerability Management and Risk Management strategies aligned with security and compliance objectives.
- Manage large-scale vulnerability assessment programs across on-premises, cloud, network, server, endpoint, and application environments.
- Establish risk-based vulnerability prioritization methodologies and remediation governance processes.
- Drive vulnerability remediation programs by collaborating with Infrastructure, Cloud, Application, Network, and Security Operations teams.
- Develop executive-level dashboards, KPI/KRI metrics, risk scorecards, and remediation tracking reports.
- Oversee cyber risk exposure monitoring and external attack surface assessment using BitSight.
- Assess third-party security posture, cybersecurity ratings, and supplier risk metrics, and provide strategic recommendations to reduce business risk.
- Lead security posture reviews and risk assessments and provide recommendations to senior leadership.
- Architect, administer, and optimize Infoblox DDI (DNS, DHCP, and IP Address Management) infrastructure.
- Ensure high availability, scalability, performance, and security of enterprise DNS and IP management services.
- Implement DNS security controls, network visibility solutions, and operational best practices.
- Lead upgrades, migrations, patching, capacity planning, performance tuning, and operational enhancements for security platforms.
- Support internal and external audits, regulatory assessments, compliance initiatives, and risk management programs.
- Develop operational standards, governance frameworks, SOPs, runbooks, and service improvement plans.
- Drive automation and process optimization initiatives to improve efficiency and reduce operational risks.
- Engage with vendors and stakeholders to define product roadmaps, resolve complex issues, and evaluate emerging technologies.
- Mentor junior engineers and provide technical leadership across vulnerability management and security infrastructure domains.
Security Platforms
- Tenable Nessus
- BitSight
- Infoblox DDI
- Enterprise Vulnerability Management
- Risk-Based Vulnerability Prioritization
- Security Risk Assessment & Governance
- External Attack Surface Management
- Third-Party Risk & Security Ratings
- DNS, DHCP & IP Address Management (DDI)
- DNS Security & Network Infrastructure Security
- Security Compliance & Regulatory Requirements
- Security Architecture & Engineering
- Security Reporting & Executive Dashboarding
- Security Operations & Governance
- Process Automation & Continuous Improvement
More Info
Key Skills
BitSight
Third-Party Risk Security Ratings
Security Reporting Executive Dashboarding
DNS Security Network Infrastructure Security
External Attack Surface Management
Security Architecture Engineering
Risk-Based Vulnerability Prioritization
Security Compliance Regulatory Requirements
Infoblox DDI
Security Operations Governance
Tenable Nessus
Process Automation Continuous Improvement
Enterprise Vulnerability Management
DNS DHCP IP Address Management DDI
Security Risk Assessment Governance
