Assistente de Segurança da Informação supporting operational activities in information security at AuditSafe. Engaging in monitoring, documentation, and compliance efforts in cybersecurity.
About the role
- Director of Engineering, Security in charge of Nexxen's security program and governance. Leading secure practices and collaborating with executives to ensure risk reduction and compliance.
Responsibilities
- Own the strategy, delivery, and lifecycle of our security program across applications, cloud/infrastructure, identity, data, and SOC operations.
- Lead secure-by-design practices, incident readiness, and AI security governance while partnering with executives and cross-functional leaders to deliver measurable risk reduction and compliance at scale.
- Establish secure SDLC and architecture guardrails, ensures detection and response effectiveness, governs security vendors and budgets, and drives process transformation.
- Collaborate closely with Engineering/Platform on CI/CD and Kubernetes, with IT for endpoint and access policy enforcement, with Data on protection and lineage, and with Legal/Compliance on SOC 2/SOX/GDPR and AI governance.
Requirements
- 10+ years in Security Engineering with 5+ years leading managers and multi-domain portfolios (SOC/IR, AppSec, Cloud/Infra, Identity)
- Hands-on leadership with:
- AWS multi-account security (Organizations, Control Tower, IAM, SCPs, GuardDuty, Security Hub, Macie, KMS, CloudTrail, Config)
- Kubernetes/EKS, container security, service mesh, ingress, and secrets management (Vault/Secrets Manager)
- Secure SDLC with CI/CD (GitHub/GitLab), Terraform/Terragrunt, OPA/Conftest, SAST/DAST/SCA (CodeQL, Semgrep, Snyk, ZAP/Burp)
- Web/API protections (AWS WAF/Cloudflare), SBOM/signing (Syft/Grype, Cosign/Sigstore), Dependabot/Renovate, Gitleaks
- Endpoint/Network security (Palo Alto/Fortinet, Zscaler/ZTNA, CrowdStrike/SentinelOne, Jamf/Intune)
- Identity/SSO with Azure AD/Entra ID, PIM, Conditional Access, SCIM; Okta or AWS IAM Identity Center
- SIEM/SOAR (Cyrebro; Tines/XSOAR) and threat intel (MISP/OpenCTI); GRC (Drata/Vanta/ServiceNow), Jira/Confluence
- Proven delivery of large-scale security transformations and measurable risk reduction; executive presence and board/audit experience.
- Excellent leadership, stakeholder management, and team-building skills.
- Strong problem-solving, analytical abilities, and crisp decision-making.
- Exceptional communication and interpersonal skills.
- Ability to operate under pressure and manage multiple priorities.
Benefits
- medical
- dental
- vision
- disability insurance
- 401(k)
- EAP
- parental leave
- unlimited vacation
- company-paid holidays
Job title
Job type
Experience level
Salary
Degree requirement
Tech skills
Location requirements
Application Security Specialist improving security practices throughout development lifecycle at ClickBus. Collaborating with teams for vulnerability remediation and secure coding guidelines implementation.
Security Architect for Logicalis focusing on networking and security solutions for clients. Engaging with vendors and providing technical documentation and proposals collaboratively.
Técnico de Segurança do Trabalho ensuring safety protocols and risk management at KFC stores in Brazil. Focused on implementing regulatory standards and safety training initiatives.
DevSecOps engineer at Ford ensuring secure software development and compliance with security standards. Collaborating with teams to embed security practices and assess vulnerabilities in software delivery.
Security Officer responsible for ensuring safety and security at the Genesee Brewing Company. Monitoring premises, responding to emergencies, and providing visitor assistance during shifts.
Security Estimator creating estimates and proposals for security projects at LINX. Collaborating with engineering and sales teams for system design and client relationships.
Product Security Architect at Expedia designing secure architecture for services and APIs. Collaborating with teams to guide secure practices and integrate AI - driven solutions.
IT Security Officer overseeing information security for a specific IT sector at Desjardins. Collaborating with cross - sector teams and managing information security risks and vulnerabilities.
Associate, Information Security professional at Santander focusing on Vulnerability Management and network security exposure. Collaborating with teams to enhance security posture and manage technology risks.