Lead Cybersecurity Asset Management Engineer

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

Lumen is the most peered U.S. communications provider with the 2nd largest global fiber backbone with customers in more than 60 countries. Lumen Security defends a signification portion of the global internet backbone as well as critical communications, technology, and security services for millions of customers. We are seeking a Lead Cybersecurity Asset Management Engineer to guide teams of IT and security professionals in building and maintaining the processes and programs required to secure Lumen’s services. You will lead various security initiatives all designed to secure solutions supporting or providing customer services. This position reports directly to the Product & Platform Security leader and will require strong partnerships with global network engineering, software development, operations, infrastructure, privacy, legal, and product management teams.

Location

This is a remote opportunity open to candidates located anywhere in the U.S.

The Main Responsibilities

• Lead security initiatives designed to secure solutions supporting and/or providing customer services
• Effectively partner with a diverse highly skilled team of IT and security engineers, architects, and subject matter experts
• Work with product owners and development teams to establish complete asset inventories and build in security best practices at the beginning of the product development life cycle
• Establish and refine processes and standards for performing security design reviews and regular security assessments (analyze, assess, and remediate) to ensure systems supporting our product lines meet the established software design standards
• Implement processes and standards for risk-based analysis and mitigations using threat modeling and related techniques for all in-scope products
• Take a leadership role in driving security and privacy/data initiatives and ensure end-state product meets regulatory requirements
• Coordinate Security SME support to development teams
• Interact directly with the security community regarding vulnerabilities and threats, with focus on areas that may directly impact Lumen’s product lines
• Provide leadership on different forums - promoting security awareness, including recommended solutions and staying current on new threats, vulnerabilities and best practices

What We Look For in a Candidate

• Bachelor’s Degree or equivalent work experience
• Experience partnering with cross-functional teams to deliver widely impactful security initiatives
• Demonstrate excellent judgement in prioritizing security efforts using a risk-based approach
• Experience capturing customer requirements for solution development 
• Strong communication with ability to effectively communicate with and present to multiple audiences from engineering to business unit leadership
• Comfortable dealing with ambiguity and conflicting priorities
• Flexibility and the ability to improvise when needed
• Established history of effectively managing large initiatives through completion/operations
• Ability to lead and foster continuous innovation and consistently improving organizations
• Strong quantitative and analytical abilities with a firm foundation on metrics that not only track activity but also quantify the impact of security initiatives on the financial, growth, and performance of the business
• Demonstrate knowledge of security technologies, including Axonius, Tenable, Wiz and CrowdStrike
• Experience working with a CMDB such as ServiceNow
• Working knowledge of regulatory requirements and government security standards such as FedRAMP and Controlled Unclassified Information (CUI) standards, along with best practices such as NIST Cybersecurity Framework (CSF), ISO 27001-27002, ISO 22301, PCI, SOC 1 & SOC 2 and other applicable security and privacy laws.

Compensation