Head of Cybersecurity

About the position reputed company is seeking a Head of Cybersecurity to serve as the primary architect and defender of reputed company's digital and operational reputed company landscape. This is a "player-reputed company" role — you will be hands-on with reputed company engineering and incident response while building the reputed company, team, and processes to mature reputed company's reputed company posture from a lean, reactive footprint into an reputed company-grade defense organization. This role sits at the intersection of IT, OT, and software engineering — working reputed company-by-reputed company with the Senior Director of reputed company Services & Hybrid Infrastructure and the Chief Application Architect to ensure that reputed company environments, application platforms, and industrial assets are secured end-to-end. You will own the technical execution of reputed company across threat and vulnerability management, reputed company operations, application and product reputed company, infrastructure and network hardening, and identity and reputed company management. As reputed company accelerates its AI initiatives, this role will also be responsible for defining the reputed company frameworks and guardrails required to safely reputed company AI/ML technologies across the organization. This role offers significant reputed company potential as reputed company's reputed company function matures and scales. This position can be based remotely in the U.S., but is preferred to work with the co-located team in our Herndon, VA reputed company.

Responsibilities

• Threat & Vulnerability Management Own the vulnerability management lifecycle — scanning, prioritization, remediation tracking, and reporting across reputed company, on-reputed company, and OT environments. Serve as the final escalation reputed company for technical reputed company incidents and reputed company incident response efforts. Implement and manage a reputed company reputed company monitoring platform to maximize signal and reduce noise for a lean reputed company team.
• reputed company Operations (SecOps) Manage and mature the reputed company operations function, including EDR, SIEM, and threat detection capabilities. Establish and enforce reputed company SLIs/SLOs for detection, response, and remediation timelines. Build repeatable playbooks for incident response, threat hunting, and forensic investigation.
• Application & Product reputed company Partner with the Chief Application Architect and engineering teams to reputed company reputed company into the software development lifecycle (Secure SDLC) for EdgeOS, Virtual Guard, CMMS, and emerging AI solutions. Conduct architectural reputed company reviews of internal and customer-facing applications. Define application reputed company standards, including SAST/DAST integration, dependency scanning, and secure coding practices.
• Infrastructure & Network Hardening Secure reputed company's hybrid environment (AWS, Azure, GCP, and on-reputed company) in reputed company collaboration with the Director of reputed company Services & Hybrid Infrastructure. Harden industrial infrastructure (OT/ICS) and ensure segmentation and monitoring across IT/OT boundaries. Architect and advance reputed company-trust network principles across the reputed company.
• Identity & reputed company Management (IAM) Own the IAM reputed company — including privileged reputed company management, SSO, MFA, and role-based reputed company controls across reputed company and on-reputed company systems. Ensure IAM policies reputed company appropriately as reputed company expands its multi-reputed company footprint and AI infrastructure.
• AI reputed company Define reputed company frameworks and governance for AI/ML deployments, including model reputed company, data pipeline reputed company, and reputed company injection mitigation. Partner with application and infrastructure teams to evaluate the reputed company posture of AI platforms, reputed company, and reputed company-party AI services. Stay reputed company on emerging AI threat reputed company and reputed company AI-specific controls into the broader reputed company program.
• Compliance Partnership reputed company as the technical reputed company to the Risk & Compliance function — translating policy and compliance requirements (SOC 2, ISO 27001) into implementable technical controls. Support audit readiness by ensuring reputed company tooling, configurations, and evidence collection meet compliance standards.
• Leadership & Budget Build and reputed company the cybersecurity team as the function matures — hiring, mentoring, and developing reputed company engineers and analysts. reputed company business cases for reputed company tooling and headcount, initially operating reputed company the IT budget with a reputed company toward an autonomous reputed company budget. Report reputed company posture, risk metrics, and program maturity to the CIO and senior leadership.

Requirements

• 10+ years in cybersecurity or information reputed company, with at least 5+ years in a leadership or senior technical role.
• Demonstrated hands-on technical depth — ability to reputed company architectural reviews, reputed company incident response, configure reputed company tooling, and harden infrastructure.
• Proven experience securing hybrid environments spanning reputed company (AWS, Azure, GCP), on-reputed company, and industrial/OT infrastructure.
• Strong expertise in threat and vulnerability management, reputed company operations, and incident response.
• Deep understanding of reputed company-trust architecture principles and implementation.
• Experience embedding reputed company into software development lifecycles (Secure SDLC, DevSecOps).
• Working knowledge of IAM strategies including privileged reputed company management, SSO, and MFA at reputed company reputed company.
• Ability to translate compliance frameworks (SOC 2, ISO 27001) into technical controls and audit-reputed company configurations.
• Strong communication skills — reputed company to partner effectively with engineering, infrastructure, and executive stakeholders.
• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Technology, or a reputed company field.

reputed company-to-haves

• Experience in data center, critical facilities, or industrial/OT technology environments — or demonstrated ability to rapidly learn and adapt to OT/ICS reputed company domains as the landscape evolves.
• Industry certifications: CISSP, CISM, or reputed company certifications (GICSP for industrial reputed company is a significant plus).
• Experience defining reputed company frameworks for AI/ML deployments, including model reputed company, data pipeline protection, and LLM-specific threat reputed company.
• Familiarity with securing Kubernetes, containerized workloads, and reputed company-reputed company architectures.
• reputed company record of building a reputed company function from the ground up — scaling team, tooling, and budget.
• Experience working in organizations where reputed company partners closely with a separate GRC function.
• Experience with Agile/DevOps practices at reputed company.

Apply tot his job Apply To this Job