> Markdown version of [/jobs/ext/3778338-lead-security-engineer](https://www.wearedevelopers.com/jobs/ext/3778338-lead-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Security Engineer

- **Company:** NVR, Inc.
- **Location:** Northern Virginia, VA, United States
- **Experience:** Expert
- **Salary:** $135,000.0 - $155,000.0
- **Contract:** Permanent contract
- **Skills:** Microsoft Windows, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Network Security, Systems Development Life Cycle, Zero Trust Network Access, Runbook, Security Information and Event Management, Software Vulnerability Management, Data Logging, Delivery Pipeline, HybridCloud, Information Technology, CIS Benchmarks, Security Orchestration, Automation & Response
- **Published:** October 16, 2026
- **Apply:** https://www.juju.com/job/1_nvr-38093

## About the Role

Job Qualifications + 8+ years of progressive experience designing, implementing, administering, and improving enterprise information security solutions, including significant responsibility for complex technical initiatives. + Demonstrated ability to lead security architecture and engineering decisions across multiple enterprise platforms or security domains. + Deep expertise in several areas such as endpoint security, vulnerability management, privileged access management, cloud security, Microsoft 365 security, SIEM/logging, encryption, email security, network security, or threat management. + Experience leading incident response, technical investigations, root-cause analysis, and enterprise remediation efforts. + Strong knowledge of security architecture principles, control frameworks, policies, standards, baselines, audit requirements, and risk-management practices. + Ability to translate risk into practical technical requirements and balance security, business, operational, and
user needs. + Proven experience leading cross-functional technical projects and influencing outcomes without relying on direct authority. + Advanced documentation and communication skills, including standards, designs, decision records, procedures, runbooks, executive recommendations, and technical presentations. + Ability to operate independently, make sound decisions in ambiguous situations, and serve as an escalation point for complex security engineering matters.
Preferred Qualifications + Bachelor's degree in Information Security, Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent work experience. + Advanced security certification such as CISSP, CISM, GIAC, CCSP, or a relevant Microsoft, cloud, network, or product certification. + Experience with Microsoft Azure, Microsoft 365, enterprise cloud security, Zero Trust principles, security automation, and integration of security controls into delivery pipelines. + Experience in a regulated, audit-driven, or large enterprise IT environment. + Experience mentoring engineers and establishing repeatable engineering practices across a technical team.

## Description

In this lead individual-contributor role, you will set technical direction, own complex security designs and standards, guide implementation across security platforms and services, and serve as a trusted security partner for major technology initiatives.
You will lead through influence, mentor engineers, and help ensure that security controls are practical, consistently implemented, and operating effectively.
What You'll Do + Lead the architecture, design, implementation, and continuous improvement of enterprise security platforms and services. + Establish technical standards, security baselines, reference designs, configuration requirements, and engineering runbooks across assigned security domains. + Serve as the security engineering lead for complex projects, translating business and technical requirements into secure, supportable solutions. + Provide technical ownership for capabilities such as endpoint protection, vulnerability management, privileged access management, cloud and Microsoft 365 security, log management, encryption, secure email, and network security. + Lead technical risk assessments, design reviews, threat modeling, control validation, and security testing for new and changing solutions. + Ensure security tools are maintained, integrated, monitored, and configured in accordance with documented standards, current releases, and approved security baselines. + Provide
senior-level support for complex incidents, including technical analysis, containment strategy, remediation leadership, root-cause review, and post-incident improvements. + Lead vulnerability-management engineering and remediation coordination, including prioritization, exception analysis, trend review, and verification of corrective actions. + Partner with infrastructure, applications, cloud, architecture, audit, and business teams to embed security throughout the system development lifecycle. + Evaluate emerging threats, technologies, and products; develop recommendations and present options, risks, and tradeoffs to technology leadership. + Lead medium-to-large security initiatives and coordinate work across technical teams, vendors, and stakeholders. + Mentor security engineers, provide technical review and coaching, and promote shared engineering practices across the team. + Develop meaningful measures for security control health, operational effectiveness, risk reduction, and
continuous improvement.