Sr Lead IT Systems Security Engineer

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

The Senior Lead IT Systems Security Engineer is a critical role within our organization, responsible for overseeing and enhancing the security of our IT systems. This position requires a highly skilled and experienced professional who can design, implement, and manage comprehensive security solutions to protect our infrastructure. The ideal candidate will have a deep understanding of security principles, technologies, and best practices, and will be able to lead a team of security engineers to ensure the integrity, confidentiality, and availability of our systems.

Location

This is a Work From Home position available from any US-based location. You must be a US Citizen or Permanent Resident/Green Card for consideration.

The Main Responsibilities

Security Architecture and Design: Develop and implement robust security architectures for IT systems, ensuring compliance with industry standards and best practices. This includes designing security solutions for cloud environments, virtualization platforms, and on-premises infrastructure.
Incident Response and Management: Lead incident response efforts for security incidents, including investigation, containment, remediation, and reporting. Develop and maintain incident response plans and procedures to ensure timely and effective handling of security events.
Security Policy Development: Create and enforce security policies and procedures to protect the organization's IT assets. Ensure that security policies are up-to-date and aligned with regulatory requirements and industry standards.
Risk Assessment and Management: Conduct regular risk assessments to identify and mitigate potential security threats. Develop and implement risk management strategies to protect the organization's IT systems from vulnerabilities and attacks.
Security Monitoring and Analysis: Design and maintain security monitoring systems to detect and respond to anomalies and potential threats. Utilize advanced data analytics techniques to analyze security threats and develop data-driven security strategies.
Team Leadership and Development: Lead and mentor a team of security engineers, providing guidance and support to ensure the team's success. Foster a culture of continuous learning and improvement within the security team.
Collaboration and Communication: Work closely with other departments, including IT, compliance, and business units, to ensure that security measures are integrated into all aspects of the organization's operations. Communicate security risks and strategies to senior management and other stakeholders.
Security Technology Management: Oversee the deployment and management of security technologies, including firewalls, intrusion detection/prevention systems, SIEM, and endpoint protection solutions. Ensure that security technologies are properly configured and maintained to provide maximum protection.

What We Look For in a Candidate

• Bachelors or Masters Degree in Computer Science or comparable field or comparable experience with 8+ years security engineering experience in managed services or Internet settings.
• Strong knowledge of Unix-based operating systems (Linux, Solaris). Experience with virtualization technologies (VMWare, Red Hat OpenStack).
• Expert-level knowledge of IP networking and protocols. Extensive experience troubleshooting IP networks. Experience with Ipv6. 
• Programming/scripting abilities in Perl, Unix/Linux shell, PHP, Python, Java or similar programming languages.
• Extensive knowledge of web application security, browser security models, and application security vulnerabilities such as OWASP Top Ten.
• Mastery of security principles including confidentiality and integrity of data, authentication and authorization, and cryptographic protocols.
• Deep understanding of network attacks, DDoS, malware, phishing, email security, encryption, authentication, log and forensic analysis, IP and device reputation, and security policies.
• Hands-on exp