Security Engineering Manager

Job Description

Security Engineering / Manager (CISO Function)

Job Summary
The Security Engineering - Manger is part of the central CISO function and is responsible for identifying security architecture and control gaps, designing security use cases, defining measurable success criteria, conducting technical evaluations and Proof-of-Concepts (PoCs), and providing risk-based recommendations for enterprise-wide security capabilities.
This role operates across Identity, Network Security, Cloud Security, Data Security, and Detection & Response, with a strong mandate to address emerging risks from AI and Generative AI adoption. The role serves as a critical bridge between security strategy, architecture, engineering, and operations.

Roles & Responsibilities

1. Security Architecture & Design Gap Identification
•    Identify design, control, and coverage gaps across existing security architectures and technologies.
•    Assess enterprise environments (on prem, cloud, hybrid, SaaS) against threat models, attack paths, and business risks.
•    Review security architecture for new programs, platforms, and initiatives to ensure alignment with Zero Trust and defense in depth principles.
•    Maintain and evolve security reference architectures and target state blueprints.

2. Security Engineering
•    Define business aligned security use cases across domains such as: 
o    Identity compromise and misuse
o    Data exfiltration and insider risk
o    Cloud misconfigurations and privilege abuse
o    Lateral movement and advanced threats
o    AI driven misuse and data leakage
•    Translate threat scenarios into technical detection, prevention, and response use cases.
•    Clearly articulate use case objectives, assumptions, dependencies, and risk coverage.

3. Success Criteria & Outcome Definition
•    Define clear success criteria and measurable outcomes for every security capability and use case.
•    Establish KPIs and effectiveness metrics for coverage , risk reduction , Time to detect and time to respond
•    Align success criteria with business risk, regulatory expectations, and CISO priorities.

4. Proof-of-Concept (PoC) & Technical Evaluation
•    Lead and execute structured PoCs for security technologies and solutions.
•    Design PoCs with Realistic attack scenarios
•    Evaluate solutions across Functional coverage, Architecture fit, Scalability and performance, Integration with existing ecosystem
•    Document findings with evidence based assessments.
•    Provide clear, defensible recommendations to CISO leadership based on Risk posture improvement
•    Support vendor selection, architecture decisions, and phased adoption strategies.

5. AI & Generative AI Security
•    Maintain strong understanding of AI & GenAI architectures (LLMs, assistants, agents)
•    Identify risks introduced by AI usage, including Data leakage through prompts, Model misuse and hallucinations, Shadow AI and ungoverned tools, Supply chain and model integrity risks
•    Evaluate and define use cases for AI security solutions such as AI gateways and prompt firewalls, DLP for AI interactions, AI aware monitoring and red teaming
•    Contribute to enterprise AI security standards and governance.

6. Cross Domain Technical Expertise
Hands on any of 2 /3 areas
•    Identity & Access Management 
o    Zero Trust, IAM, CIAM, PAM, privilege lifecycle
•    Network & Platform Security 
o    SASE, ZTNA, NGFW, segmentation
•    Cloud Security 
o    CSPM, CWPP, CIEM across AWS, Azure, GCP
•    Data Security 
o    DLP, encryption, key management, DSPM
•    Detection & Response 
o    SIEM, XDR, SOAR, threat modeling (e.g., MITRE ATT&CK)

͏Preferred Qualifications

•    10+ years of experience in cybersecurity engineering / architecture
•    Strong experience designing and evaluating enterprise security controls
•    Demonstrable experience in use case driven security engineering
•    Practical exposure to PoCs and technology evaluations
•    Understanding of modern threats and attack techniques

Preferred Certifications
•    CISSP, CISM, or equivalent
•    Cloud security certifications (AWS, Azure, GCP)
•    AI/ML security or governance certifications