Sr Lead Information Security Engineer

About Lumen

Lumen connects the world. We are igniting business growth by connecting people, data and applications – quickly, securely, and effortlessly. Together, we are building a culture and company from the people up – committed to teamwork, trust and transparency. People power progress.

 

We’re looking for top-tier talent and offer the flexibility you need to thrive and deliver lasting impact. Join us as we digitally connect the world and shape the future.

The Role

We are seeking a highly skilled and experienced Senior Lead Information Security Engineer specializing in Threat detection and data analytics, to join the Public Sector Security Architecture and Engineering team. In this role, you will be a part of a team that builds security solutions to protect Lumen public sector customers and infrastructure, from advanced security threats.

 

The ideal candidate will be responsible for certifying architecture designs, creating implementation guides and training security operations teams, to support a new virtualized cloud infrastructure environment. This role requires a deep understanding of cloud security, virtualization technologies, best practices in information security and CISA controls. Additionally, this role requires recurring collaboration with Product Management, IT, Architecture, Engineering and Operations teams, to provide subject matter expertise.

 

Candidate must be a U.S. Citizen and eligible to obtain suitability and/or a US Government personnel security clearance.

Location and Schedule

This is a Work from Home position available from any US-based location.

The Main Responsibilities

Security Engineering Researches, evaluates, engineers, develops, troubleshoots, and supports solutions and infrastructure for the company’s Managed Security portfolio.
Technical Documentation and Test Procedures Defines and executes repeatable test procedures, creation of technical documentation, and delivery of scalable standards.
Solution Design Responsibility for independent engineering design to include collaboration with the Product Management, Product Development, Architecture, and Operations staff on complex security solutions.
New Capabilities Develop and implement threat detection rules, signatures, and analytics to identify suspicious behavior.
Improve Processes Assesses security operational processes to identify opportunities to optimize, enhance, and automate.
Security Infrastructure Support Conduct real-time threat hunting and anomaly detection to proactively identify malicious activity and analyze attack patterns.
Security Operations Support Create a scalable process to continuously monitor logs, alerts, and security telemetry from SIEM, EDR, and network security tools.  
Lifecycle Management Define process and support all platform lifecycle management.
Vendor Relations Develops partnerships with key equipment suppliers. Communicates requirements, guidance, and vision to develop, implement, and support security solutions.

What We Look For in a Candidate

- Experience using industry leading security solutions and technologies, to implement modern threat intelligence and data analytics solutions.
- Build lab and production development environments to certify architecture designs.
- Develop low-level design documents, configuration templates and implementation guides.
- Implement production systems and train operations teams.
- Experience with integrated SIEM platforms, data analytics techniques, security incident response remediation and threat intelligence feeds.
- DevOps tools such as Git, Docker, Jenkins, Gitlab CI/CD; configuration management tools such as Ansible, Salt, Puppet, Chef; and scripting language experience.
- Demonstrated ability to effectively manage vendor and contract resources.
- Experience working with government programs, employees, and contractors.
- 10+ years of related experience.
- Undergraduate degree in Computer Science, Engineering, or related field, or equivalent experience.

Preferred Qualifications:

- SOC (Security Operations Center) data analytics and incident response experience.
- Hands-on experience with accreditation and acceptance processes for complex, integrated solutions in a DOD or federal government environment.
- Federal TIC (Trusted Internet Connections) or MTIPS (Managed Trusted Internet Protocol Services) experience.
- Understanding of cloud infrastructure, networking, storage and platform services and proficiency in cloud-n