Senior Security Engineer (InfoSec Lead)

About the role

Lucid, a luxury electric vehicle manufacturer, is seeking a Senior Security Engineer to act as a security expert in network, application design, operating systems, endpoint protection, mobile devices and foundational InfoSec technical controls. The role works closely with software and data engineers to embed security across all systems, and involves coaching the Security Operations and Incident Response team.

Key responsibilities

• Develop and maintain access control rules and participate in and coach the Security Operations and Incident Response team.
• Work with software and data engineers to ensure adequate security solutions are in place across all systems.
• Manage and update the InfoSec risk model and contribute to the information security strategy.
• Act as a trusted advisor to business units and internal IT, ensuring requirements align with policy and regulatory and contractual compliance.
• Advocate for cyber risk mitigation during planning and implementation of new services.
• Design and build enterprise-scale security architectures and monitor security requirements for LANs, WANs, VPNs, routers and firewalls.
• Perform technical security assessments, code audits and design reviews; run offensive security exercises and respond to incidents with post-event analysis.
• Secure container-based applications and Kubernetes platforms, and audit and manage applications and databases.
• Identify vulnerabilities, maintain authentication and security data, and lead compliance assessments of cybersecurity frameworks.

Required profile

• Bachelor's degree in engineering, information security or an IT-related field, or equivalent experience.
• 15+ years of hands-on experience in high-level technical security technologies.
• Certifications such as CCIE Security, CISSP, F5-ASM, Kubernetes, Infoblox and Palo Alto.
• Experience leading the design of network security infrastructure and integrating new requirements into existing architectures.
• Experience leading compliance assessments of cybersecurity frameworks and implementing DoD and Federal IA assessment and authorization processes.
• Strong communication and training skills, and a flexible work approach.

Required skills

• F5 Big-IP, Palo Alto, Infoblox, Cisco, Kubernetes and cloud services (PaaS, IaaS, SaaS).
• Network design, virtualization and containerization, mobile security (MDM, MAM), encryption/PKI, database and application/API security, identity management.
• Data loss prevention, cloud access security brokers, micro-segmentation, multi-factor authentication, endpoint protection, SIEM and perimeter defenses.
• Privileged account management, web filtering, WAFs, advanced endpoint protection, vulnerability management and incident response.
• ITIL and ITSM, and familiarity with NIST, ISO 27K and CIS security controls.