DIRECTOR OF SECURITY ENGINEERING (REMOTE)

Job Summary

Reporting to the Sr. Director of Cybersecurity within Compass Group North America, the Director of Security Engineering owns the strategy, leadership, and execution of Compass Group’s security engineering functions across cloud security, infrastructure security, and detection engineering. Leading a multi-team organization, the Director sets the technical roadmap for security controls across cloud environments and the security tooling and infrastructure underpinning our security operations.

The role owns the health and effectiveness of our security tooling, the detection engineering function that turns telemetry into high-fidelity, actionable signals, and the cloud security capabilities that deploy and maintain controls across our multi-cloud footprint. It is highly collaborative, partnering closely with the Incident Management, Identity Management, Exposure Management, Security Architecture, and Security Administration teams within the CISO Office, and with technology teams across Compass Group North America.

Job Responsibilities

• Lead the Security Engineering organization (Cloud Security, Infrastructure Security, and Detection Engineering) through managers and individual contributors, setting organizational, team, and individual goals aligned to security objectives.
• Recruit, develop, and retain technical talent: build clear career paths, mentor managers and engineers, and conduct performance appraisals.
• Own the multi-year security engineering roadmap, shaping capabilities, methods, and investment priorities.
• Own the security vendor portfolio: tool consolidation and rationalization, procurement, renewals, licensing and budget alignment, support escalations, roadmap influence, and quarterly business reviews. Hold vendors and tools accountable to measurable outcomes and manage tool lifecycle end to end.
• Partner across IT, infrastructure, application, and sector technology teams to advance security engineering projects, and lead or support initiatives sponsored by security, technology, and business teams.
• Present posture and metrics to the CISO Office and senior technology leadership; serve as executive-level subject matter expert on security engineering, cloud-native controls, and defensive engineering.
• Direct the design, deployment, and operation of security visibility and control mechanisms across AWS, GCP, and Azure, including validating adherence through regular monitoring and audits.
• Own the technical direction and operational health, availability, coverage, performance, and patch management of the endpoint, network security, and vulnerability management platform stack.
• Own SIEM, SOAR, and security telemetry platform strategy: log source prioritization, ingestion optimization and filtering, consumption management, and platform health and efficiency.
• Mature detection engineering as a discipline: use cases mapped to recognized adversary frameworks such as MITRE ATT&CK, detection-as-code with version control and testing, tuning, and coverage measurement.
• Drive event prioritization and cross-tool correlation to reduce false positives, in collaboration with the Incident Management team.
• Direct and advance automation development supporting incident management and other security capabilities, and ensure the health, optimization, and intended results of workflows.
• Remain available for escalation during significant security incidents and major security platform disruptions.

Job Qualifications

• 10+ years across cybersecurity and information technology, including 5+ years managing engineering teams and 2+ years leading managers or senior technical leads.
• Bachelor’s degree in Computer Engineering, Computer Science, Information/Cybersecurity, or equivalent work experience.
• Proven experience building or maturing enterprise-scale security engineering functions across cloud security, infrastructure security, and detection engineering, including securing medium to large enterprise infrastructure.
• Deep, current experience designing, implementing, and securing cloud infrastructure in one major platform (AWS, GCP, or Azure), with working knowledge of a second.
• Strong knowledge of cloud security principles and industry standards (NIST, ISO 27001, CIS).
• Demonstrated ownership of enterprise security tooling, including SIEM, EDR, and web content filtering strategy.
• Strong analytical and problem-solving skills, with the ability to assess risk, prioritize competing initiatives, and lead through ambiguity in a decentralized organization.
• Excellent written and verbal communication, project management, and documentation skills, with the ability to present security concepts to technical and non-technical audiences.

Preferred Qualifications

• Broad experience with platforms such as Google SecOps, CrowdStrike, Zscaler, Microsoft 365, vulnerability management, and privileged access management, or equivalents.
• Industry certifications (CISSP, CCSP, CISA, CISM, GCIA, GCIH, or cloud security specialty credentials).
• Experience in a large, highly distributed enterprise environment.