Lead Cybersecurity Engineer (Level V)

Job Description

Job Description

About TRC Talent Solutions

At TRC Talent Solutions, we specialize in placing elite IT and engineering professionals into roles where their work truly matters. We partner with top-tier organizations that depend on secure, resilient technology environments to support their critical operations. When you work with TRC, you are connecting with a team dedicated to aligning your career goals with highly stable, impactful, and rewarding direct-hire opportunities.

About the Client & The Opportunity

Our client is a premier enterprise organization responsible for protecting the digital infrastructure that powers mission-critical regional operations. You will be joining a highly stable environment that provides shared services and secures a broader family of companies. This is an organization where cybersecurity is not an afterthoughtit is the foundation of their operational resilience.

They are seeking a senior technical leader to drive practical risk reduction and secure technology operations across their enterprise. This opportunity is ideal for an experienced cybersecurity professional who enjoys leading complex security engineering initiatives, mentoring technical team members, partnering across infrastructure teams, and owning the security stack.

What You Will Do

As a Cybersecurity Engineer V, you will serve as a senior technical subject matter expert across multiple cybersecurity disciplines, leading threat detection, vulnerability management, incident response, and enterprise security improvement efforts.

Platform Engineering: Lead the implementation, administration, and optimization of SIEM, EDR, security monitoring, and other cybersecurity platforms.

Threat Operations: Develop and maintain detection rules, alerting logic, dashboards, and threat intelligence integrations. Conduct threat hunting and analyze indicators of compromise (IOCs).

Incident Response: Lead cybersecurity incident investigations, coordination, response, root-cause analysis, corrective actions, and playbook development.

Vulnerability Management: Manage vulnerability scanning, assessment, remediation prioritization, validation testing, metrics, and risk reduction reporting.

Cloud & Container Security: Implement and maintain security controls within Azure and other cloud environments (cloud monitoring, governance, detection). Engineer and maintain secure containerized/virtualized environments.

Infrastructure Security: Design, implement, and maintain enterprise security technologies, secure configuration baselines, hardening standards, and security automation. Lead endpoint least-privilege initiatives.

Data Protection: Lead implementation and management of enterprise data security capabilities, including data classification, protection policies, and DLP.

Strategic Collaboration: Review new technologies and projects for security requirements. Partner with MSSPs, third-party SOCs, vendors, and cross-functional teams to evaluate and manage cybersecurity services.

Documentation: Develop and maintain cybersecurity documentation, including policies, procedures, standards, guidelines, and technical baselines.

Senior-Level Expectations (Level V)

Mentorship: Mentor cybersecurity professionals and serve as a senior technical resource for the team.

Strategic Advisory: Assist leadership with strategic planning, security roadmap development, and program maturity efforts. Provide guidance to Infrastructure, EUC, application, and cloud teams.

Adversary Emulation: Leverage blue team, red team, or purple team experience to support penetration testing, threat hunting, and control validation activities.

What You Bring (Requirements)

Education: Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Technology, or a related field (an equivalent combination of education and experience may be considered).

Experience: 8+ years of proven experience in cyber or information security (12+ years preferred for candidates without a degree).

Core Competencies: Expert-level knowledge of cybersecurity architecture, security engineering principles, enterprise technologies, and industry best practices.

Analytical Skills: Strong troubleshooting, problem-solving, and documentation skills, with a deep understanding of security events across multiple OS and appliance platforms.

Communication: Excellent written and verbal communication skills; ability to clearly explain technical issues to both technical and non-technical stakeholders and adapt to evolving compliance standards.

Preferred Qualifications

Security Operations: Expertise with SIEM and IDS/IPS platforms, developing MITRE ATT&CK detection use cases, and leading enterprise incident response.

Architecture & Engineering: Experience integrating security controls across network, endpoint, identity, and application environments. Zero Trust architecture experience is a strong plus.

Cloud & Modern Infrastructure: Experience securing AWS, Azure, or GCP. Experience securing containerized and virtualized platforms (Kubernetes, Docker, VMware).

Frameworks: Working knowledge of NIST CSF, NIST 800-53, CIS Controls, and ISO 27001.

Certifications: CISSP or GIAC certification is highly preferred. CySA+, CCSP, CISM, GCIH, or OSCP are a plus.

Additional Role Expectations

This role is primarily office-based (hybrid schedule).

Occasional evening and weekend work may be required to support operations and security event response, including after-hours support for critical incidents.