Lead, Cybersecurity

Are you passionate about bringing your Cybersecurity experience to a world class organization that is leading the way in both content and technology to serve and protect our citizens at home and abroad? Do you have the skills necessary to map cybersecurity requirements into technical controls while being a team leader? If you have strong attention to detail and excellent communication skills, then Thomson Reuters Special Services (TRSS) is looking for you! 

About the Role

As the Lead Cybersecurity Engineer, you will be responsible for maintaining the highest standards of security and operational efficiency in support of our customers and employees. You will contribute to a variety of areas and will focus on managing TRSS’s cybersecurity program to deliver secure solutions in a mixed on-premises and cloud environment.  

• Lead and mentor employees from diverse technical backgrounds 

• Take ownership of the IT security posture of our company and its assets 

• Share technical knowledge, best practices, and product-specific training with internal and external employees 

• Research, implement, document, and audit custom deployment and hosting solutions that meet our customers’ unique requirements 

• Configure and deploy systems and services to support DevSecOps initiatives within the company 

• Perform tech support for onsite and remote users – core hours 9-5, M-F (after-hours maintenance and support as needed) 

• Communicate concerns and metrics to senior management and present on technical topics to a broad audience 

About You

You’re a good fit for the role of Lead Cybersecurity Engineer if you have:

• A bachelor's degree in computer-related field - equivalent experience will be considered in lieu of a degree 

• Minimum of five years IT-related experience 

• A strong security background with experience in areas such as endpoint protection, patch management, compliance audits, security training, and cloud/infrastructure security 

• Familiarity with US Government security and compliance benchmarks (STIG, CMMC, NIST). 

• Experience leading external audits such as SOC2 Type II or overseeing penetration tests 

• Ability to accurately identify risks and evidence of threats while assessing and prioritizing based on exposure and impact 

• Enterprise experience with Linux including knowledge of containerization technologies and products 

• Automation and CI/CD experience including tools such as terraform, ansible, and GitHub Actions 

• Enterprise experience with AWS and Azure cloud infrastructure 

• Extensive experience troubleshooting complex technical issues including authentication services, certificates, and network connectivity 

• The ability to lead a team to deliver solutions in a fast-paced envir