Cyber Security Specialist

Our Major Media & Entertainment Client is seeking a cybersecurity professional to support its Ad Sales organization. This role combines business-facing security partnership with hands-on technical review. You’ll triage incoming requests, assess technology and business context, identify material risks, and recommend the right level of review., You may provide direct guidance, coordinate a targeted specialist review, or route a request for deeper architecture, engineering, privacy, risk, or assurance assessment. The role calls for technical breadth and the ability to turn security findings into practical recommendations.

• 8+ years of experience in cybersecurity, IT, security architecture or engineering, technical risk, cloud/AI, or a related field. \n

• 5+ years of experience partnering with business and technical teams on secure technology solutions. \n

• Experience triaging technical security requests, identifying risks, and recommending review or remediation paths. \n

• Working knowledge across multiple security domains, including application and API security, cloud, identity, data protection, network and endpoint security, monitoring, vulnerability management, and third-party risk. \n

• Ability to assess architecture diagrams, data flows, integrations, and technical documentation. \n

• Understanding of common threats to network, cloud, web, mobile, API, and enterprise application environments. \n

• Strong communication, prioritization, case-management, judgment, and problem-solving skills. \n, * Experience with Ad Sales, advertising or marketing technology, media, customer data, measurement, or related digital platforms. \n

• Experience assessing SaaS, cloud, APIs, data clean rooms, AI/ML, identity, audience activation, partner integrations, or high-volume data processing. \n

• Familiarity with NIST CSF, CIS Controls, MITRE ATT&CK, OWASP Top 10, or CWE/SANS Top 25. \n

• Understanding of privacy, data governance, regulatory, and contractual considerations involving customer, audience, or partner data. \n

• Experience with threat modeling and creating security guidelines, playbooks, decision trees, or reusable controls. \n

• Experience providing security guidance in a large, global enterprise. Relevant certifications or training are welcome; a formal degree is not required when supported by relevant experience. \n

n \n

• Partner with Ad Sales product, engineering, data, technology, and business teams on security matters. \n

• Triage review requests by assessing scope, architecture, data use, integrations, authentication, hosting, third-party involvement, and business criticality. \n

• Recommend an appropriate review path, from established guidance to specialist or comprehensive assessment. \n

• Analyze the security of applications, APIs, SaaS products, cloud services, data platforms, AI-enabled capabilities, and partner integrations. \n

• Identify gaps and recommend mitigations across identity, application and cloud security, data protection, network security, monitoring, vulnerability management, and secure software delivery. \n

• Communicate findings and next steps clearly to technical and non-technical stakeholders. \n

• Document decisions, assumptions, risks, compensating controls, remediation needs, and ownership. \n

• Track open reviews and dependencies, and work with owners to resolve blocked items. \n

• Develop reusable review guidance and identify opportunities to improve the intake and review process. \n

\n

\n, Benefits & Perks: Brooksource offers competitive medical, dental, vision, Health Savings Account, Dependent Care FSA, and supplemental coverage with plans that can fit each employee’s needs. We offer a 401k plan that includes a company match and is fully vested after you become eligible, paid time off, sick time, and paid company holidays. We also offer an Employee Assistance Program (EAP) that provides services like virtual counseling, financial services, legal services, life coaching, etc.

\n

\n

Pay Disclaimer:

\n

The pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.

\n