Job Description
LRS is seeking an experienced and highly skilled Lead Security Engineer to drive the management and enhancement of our organization's security operations. In this pivotal role, you will be responsible for managing and improving the information security infrastructure, responding to security incidents, and ensuring the protection of the company's assets. We are looking for a strategic thinker with strong technical expertise and a proven ability to collaborate effectively with a team of IT professionals.
This position is based in our LRS Headquarters location in Springfield, IL. Your compensation will consist of a base salary plus paid overtime.
Responsibilities:
- Leadership: Lead the security operations team, providing guidance, mentorship, and support to ensure the team's success.
- Security Monitoring: Oversee the continuous monitoring of security events and incidents utilizing advanced security tools and technologies. Ensure timely identification, analysis, and response to potential threats.
- Incident Response: Design and maintain incident response protocols and procedures. Lead investigations and resolution of security incidents, ensuring minimal impact on business operations.
- Vulnerability Management: Manage regular vulnerability assessments and penetration testing to identify security weaknesses. Implement remediation plans to address identified vulnerabilities.
- Vendor Management: Ensure vendors adhere to company security standards, evaluate risks, and manage the security review and approval process.
- Risk Management: Conduct ongoing risk assessments and vulnerability analyses to identify and mitigate potential security risks.
- Security Policies and Procedures: Develop, implement, and enforce security policies, procedures, and standards aligned with industry best practices and regulatory requirements.
- Collaboration: Work closely with LRS IT, other departments, and stakeholders to ensure a cohesive and comprehensive approach to security. Serve as a trusted advisor on security-related initiatives.
- Compliance: Maintain compliance with applicable security regulations, standards, and frameworks. Stay informed of emerging security trends and regulatory updates to ensure ongoing compliance and protection.
- Strategic Planning: Continuously evaluate and improve security technologies and practices to stay ahead of emerging threats.
Success Factors:
The ideal candidate will possess extensive knowledge of security operations and demonstrate strong multitasking and program management skills in a dynamic, fast-paced environment. Success in this role will be measured by the ability to effectively manage multiple security programs with shifting priorities while maintaining high standards of performance. Collaboration with the IT team is critical, as is the capability to ensure compliance with security standards and best practices without compromising operational efficiency.
Requirements:
- Minimum of 7 years of experience in information security operations.
- Extensive knowledge of information security technologies related to threat protection and vulnerability management. Proficiency in security incident response and forensic investigation.
- Strong analytical and problem-solving skills, with the ability to assess security challenges and implement effective solutions.
- Excellent verbal and written communication skills, with the ability to effectively communicate security concepts clearly to both technical and non-technical audiences.
- High level of integrity, professionalism, attention to detail, and organization skills. Strong time management and ability to prioritize in a dynamic environment.
- You must have permanent authorization to work in the USA for any employer without sponsorship. (Visa sponsorship is not available for this position).
The following experience and skills will make you a stronger candidate:
- Minimum of 2 years of experience in a leadership or senior-level role within an IT security team.
- Relevant industry certifications, such as CISSP, CISM, CEH, or equivalent.
- Experience with Microsoft and Nessus security tools.
- Knowledge of regulatory requirements and industry standards such as ISO 27001, SOC 2, and NIST 800-53.
Organization Structure and Interfaces:
The LRS IT team consists of a Director of IT, Director of Applications, an information security analyst, and teams for networking, infrastructure, cloud, communications, end-user services, and applications. The team is based in Springfield, IL and manages the global operations at LRS. You will report to the Chief Information Officer.
For additional information about LRS, please visit jobs.lrs.com.
LRS is an equal opportunity employer. Applicants for employment will receive consideration without unlawful discrimination based on race, color, religion, creed, national origin, sex, age, disability, marital status, gender identity, domestic partner status, sexual orientation, genetic information, citizenship status or protected veteran status.
#LI-GM1