Lead Cybersecurity Engineer

Required Skills & Experience 10+ years of IT experience\n5+ years in Cybersecurity Engineering, Cloud Security, or DevOps Security\nExperience supporting both cloud and on-prem environments\nAWS is a required technology\nAWS Security Engineering (IAM, GuardDuty, Security Hub, CloudTrail, Control Tower, etc.)\nIncident Response / EDR experience\nInfrastructure, Cloud, or DevOps security background\nPython or PowerShell scripting (Python preferred)\nVulnerability Management experience\nExperience partnering with Infrastructure and Application Development teams\nAbility to work independently and own security initiatives Nice to Have Skills & Experience CrowdStrike Falcon\nMicrosoft Active Directory / Hybrid Identity\nSAST & DAST (Application Security)\nMDR / Managed Detection & Response experience\nExperience assessing security risks related to AI adoption\nExperience mentoring junior analysts or security engineers\nKnowledge of NIST CSF, CIS Controls, and AWS security benchmarks Job Description The Lead Cybersecurity Engineer is a senior individual contributor on First Student’s Cybersecurity team, responsible for the day-to-day design, engineering, oversight, and operation of the controls that protect First Student’s cloud, endpoint, application, and identity environments. The role leads cybersecurity engineering projects, drives detection and response engineering, and serves as a senior technical resource for cybersecurity investigations and cross-functional partnership with I&O, Data, and Application teams.\nThis is a hands-on practitioner role. The individual is expected to lead engineering execution, mentor junior team members, and provide technical oversight and peer review of the team’s work product within cybersecurity.\nIdentify and assess\n•\tPerform cybersecurity assessments and technical reviews for new platforms, cloud services, identity/authN/authZ changes, and externally-facing systems.\nSecurely build and protect\n•\tEngineer and lead operations of cybersecurity controls and cloud security posture management.\nMonitor, hunt, and detect\n•\tOwn the technical integration of First Student systems and log sources into the managed MDR platform, and coordinate with the MDR provider on detection use cases, scenario-based workshops, and joint investigations.\nRespond, recover, and sustain\n•\tServe as a senior technical lead for cybersecurity incidents, directing investigation, evidence collection, and containment across identity, endpoint, cloud, and email in coordination with I&O and MDR partners.\nGovern and manage risk\n•\tContribute technical content to policies and standards (e.g., Vulnerability Management, cloud security, SDLC).\nLead and coordinate\n•\tProvide technical oversight and peer review of the cybersecurity team’s work product.\n•\tMentor cybersecurity analysts and junior engineers on cloud cybersecurity, investigations, and secure design; support individual growth plans in coordination with the Senior Director. Insight Global