Cyber Security Lead

Position Description

 

The IT Cybersecurity Analyst is a key player in building and maturing a comprehensive, enterprise-wide cybersecurity program that protects VT’s operations, intellectual property, customer data, and digital assets in an increasingly complex threat landscape. This role focuses on proactive threat detection, modern security architecture, and alignment of cybersecurity strategies with business objectives—especially as the company adopts AI-driven tools, agentic AI systems, cloud/OT convergence, and Industry 4.0 technologies.

 

Overall Responsibilities

• Design, implement, and continuously improve cybersecurity controls and architectures that defend against both current and emerging threats.
• Support the integration of security into all technology initiatives, including cloud migrations, AI/agentic workflows, manufacturing OT/IoT environments, and customer-facing portals.
• Stay ahead of evolving risks such as agentic AI compromise, AI-orchestrated attacks, supply-chain vulnerabilities, ransomware, and quantum-era threats, translating them into actionable defenses.

 

Essential Job Functions

• Proactively monitor networks, endpoints, cloud platforms, OT/IoT systems, and AI/agentic environments using advanced XDR, SIEM, SOAR, and behavioral analytics tools to detect and respond to threats in real time.
• Deploy, tune, and maintain next-generation security technologies including Zero Trust architecture, SASE, EDR/XDR, privileged access management, cloud security posture management (CSPM), and container/Kubernetes security.
• Lead incident response activities: investigate breaches, coordinate containment and recovery, prepare executive-level reports, and perform root-cause analysis.
• Develop, recommend, and enforce updated cybersecurity policies, standards, and procedures that address modern risks (ransomware resilience, supply-chain security via SBOMs and third-party risk management, data loss prevention, and secure AI usage).
• Collaborate closely with Systems, Network, Database, DevOps, and OT teams to embed security into the full technology stack, including endpoint, network, data, cloud (AWS/Azure/GCP), manufacturing systems, and customer portals.
• Partner with development and application teams to embed security into the SDLC through DevSecOps practices, secure code reviews, and threat modeling for both traditional and AI/agentic applications.
• Design and deliver engaging, role-specific cybersecurity awareness training programs that cover current threats (AI-enhanced phishing, deepfakes, business email compromise) and emerging challenges such as secure use of generative AI and autonomous agentic systems.
• Own and continuously evolve the incident response and business continuity plans; conduct regular tabletop exercises, red-team simulations, and ransomware-specific drills.
• Define, track, and present meaningful cybersecurity metrics and risk dashboards to leadership, highlighting program maturity, threat landscape changes, and business impact.
• Research and evaluate up-and-coming security challenges, including:
• Agentic AI risks (prompt injection, memory poisoning, tool misuse, privilege escalation, and autonomous agent hijacking).
• AI-orchestrated cyberattacks and adversarial ML techniques.
• Supply-chain and third-party risk amplification.
• Quantum computing threats and post-quantum cryptography readiness.
• Expanded attack surface from IoT/OT convergence and cloud-native manufacturing systems.
• Ensure ongoing compliance with relevant frameworks (NIST CSF 2.0, CIS Controls v8, MITRE ATT&CK, OWASP Top 10 for LLM/Agentic AI, ISO 27001, and applicable industry regulations).
• Other duties as assigned.

 

Position Requirements

 

Professional Characteristics

• Strong sense of ownership and accountability; consistently delivers high-quality results.
• Self-motivated initiator with a proactive, solutions-oriented mindset and tireless work ethic.
• Creative, visionary problem-solver who thrives on complexity and continuous improvement.
• Rapid learner who quickly masters new technologies, tools, and threat vectors.
• Excellent written and verbal communicator capable of translating technical concepts for non-technical stakeholders.
• Collaborative team player who builds trust and partnerships across all levels of the organization.
• Unwavering integrity, ethical standards, and commitment to confidentiality.
• Business-minded professional with a customer-service focus—security enables, rather than hinders, operational excellence.