Lead Cybersecurity Specialist

Job Description:

• Advance Legence’s overall security posture through architecture, risk strategy, security controls, and cross-functional leadership
• Lead a team of cyber analysts and provide team leadership, mentoring, escalation support, and career development
• Implement and govern secure cloud architectures across platforms
• Develop, enforce, and govern cybersecurity controls, including identity, access management, and workload protection
• Partner with engineering teams to embed security into cloud-native development and DevOps processes through DevSecOps
• Evolve the security risk management program and conduct risk assessments, threat modeling, and control evaluations
• Translate technical risks into business impact and present recommendations to senior leadership
• Develop and maintain automation frameworks and scripts to improve detection, response, and compliance
• Integrate SIEM, EDR, CSPM, and other security tooling into a cohesive security ecosystem
• Oversee monitoring and detection strategies across networks, endpoints, and cloud environments
• Lead incident response, including triage, containment, root cause analysis, and post-incident improvements
• Improve detection use cases and response playbooks
• Lead vulnerability management, including scanning, prioritization, and remediation strategies
• Coordinate penetration testing and adversary simulations
• Support governance, risk, and compliance initiatives, including NIST, ISO, and SOC 2
• Lead security assessments, audits, and third-party risk reviews
• Contribute to cybersecurity strategy, roadmap planning, and security metrics reporting
• Collaborate with IT, engineering, and business stakeholders to align security initiatives with organizational goals
• Monitor emerging threats, technologies, and industry trends and provide proactive recommendations to leadership

Requirements:

• Location: Remote, United States; near a Legence office preferred
• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
• 5–10+ years of experience in cybersecurity, with demonstrated progression into senior or lead responsibilities
• Deep expertise in cloud security, network security, and enterprise security architecture
• Strong experience with SIEM, EDR, IDS/IPS, firewalls, and encryption
• Proven experience in risk management, incident response, and vulnerability management
• Proficiency in scripting or programming, such as Python, PowerShell, or Bash, for automation and security engineering
• Experience with security frameworks and compliance standards, such as NIST, ISO 27001, and CIS
• Strong analytical, problem-solving, and decision-making skills
• Excellent communication skills, with the ability to influence technical and non-technical stakeholders
• Industry certifications such as CISSP, CISM, CCSP, or GIAC preferred
• Experience leading security initiatives or small teams preferred