Cyber Security Lead

About the role

This role focuses on leading a team of security engineers and managing end-to-end security operations. The work involves detection, monitoring, incident response, and remediation across cloud, application, and endpoint environments. A key aspect is defining and executing operational roadmaps for Application Security, Infrastructure Security, and Endpoint/Office Security, ensuring continuous improvement in security posture.

The Cyber Security Lead will be responsible for driving the adoption and administration of various security tools, including EDR, SIEM, DAST/SAST, WAF, VPN, and Okta. This position also requires overseeing cloud security in AWS environments and coordinating security incident investigations from root cause analysis to remediation. Collaboration with Infrastructure, IT Operations, and Engineering teams is essential for implementing and improving security controls.

Success in this position means maintaining comprehensive security documentation, supporting compliance requirements like SOC 2 and ISO 27001 from a technical security perspective, and representing cyber operations in cross-functional initiatives. The lead will contribute to strategic planning alongside the Head of Security, ensuring that security measures align with overall business objectives.

The annual salary for this position ranges from $44,000 to $71,500 USD.

Skills that matter here

• AWS security services: This role requires strong knowledge of AWS security tools like IAM/SSO, Security Hub, GuardDuty, CloudTrail, and AWS Config for managing cloud security posture.
• EDR: The lead will be responsible for operating and administering Endpoint Detection and Response tools as part of security operations.
• SIEM: Experience with Security Information and Event Management systems is needed for detection, monitoring, and incident response.
• DAST/SAST: This position involves driving the adoption and administration of Dynamic and Static Application Security Testing tools, including integration into CI/CD pipelines.
• WAF: The role requires hands-on experience with Web Application Firewalls for protecting applications.
• Okta: The lead will drive the adoption and administration of Okta for identity and access management.

Who this role suits

• A person with at least seven years in technical security roles, spanning AppSec, Infra Sec, or Endpoint Security.
• Someone who has spent three or more years in a leadership or management position with direct reports.
• An individual capable of translating complex security risks into understandable business terms for various stakeholders.
• A candidate who can lead security incident responses, coordinate teams, and conduct thorough root cause analyses.

From the employer

WHAT YOU'LL DO

• Lead and grow a team of AppSec, Infra Sec, and Endpoint Security engineers (currently 3 engineers).
• Own the end-to-end security operations function: detection, monitoring, incident response, and remediation across cloud, application, and endpoint layers.
• Define and execute operational roadmaps for Application Security, Infrastructure Security, and Endpoint/Office Security.
• Drive adoption and administration of security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, DNS security, and Okta.
• Oversee cloud security posture across AWS environments.
• Run and coordinate security incident investigations: root cause analysis, containment, remediation, and post-mortems.
• Partner with Infrastructure, IT Operations, and Engineering teams to implement and improve security controls.
• Maintain security documentation: runbooks, configurations, playbooks, and operational procedures.
• Support compliance requirements (SOC 2, ISO 27001) from the technical security side.
• Represent cyber operations in cross-functional initiatives and contribute to strategic planning with the Head of Security.

TO SHINE IN THIS ROLE

• 7+ years in technical security roles across AppSec, Infra Sec, or Endpoint Security.
• 3+ years in a lead or management role with direct reports.
• Experience with developer security tooling: SAST, SCA, secrets scanning, and DAST integration into CI/CD pipelines.
• Hands-on experience operating and administering security tooling: EDR, SIEM, DAST/SAST, WAF, VPN, and DNS security platforms.
• Strong AWS cloud security knowledge: IAM/SSO, Security Hub, GuardDuty, CloudTrail, and AWS Config.
• Solid understanding of application security fundamentals: OWASP Top 10, SDLC security integration, and threat modelling.
• Experience with endpoint security: macOS and Windows hardening, MDM (Jamf or Microsoft Intune).
• Ability to lead security incident response: coordinating teams, driving root cause analysis, and communicating findings clearly.
• Strong communication skills — able to translate security risk into business terms for non-technical stakeholders.
• Fluent English communication skills, both written and verbal.

WHAT WE OFFER

• Hybrid onboarding to start work remotely and relocation support for you and your family.
• Comprehensive health insurance for both you and your family.
• Professional development budget for conference tickets, online courses, and other relevant resources to help you grow.
• Flexible benefits package to tailor perks that matter most for you.
• Hybrid work and generous leave options to prioritize your work-life balance.
• In-office perks, including free meals and snacks.
• Company-funded sport activities, annual offsites and team-building events.