Description
Thomson Reuters is seeking a Lead Security Engineer to set the technical direction for securing its infrastructure at scale. The successful candidate will design and implement security controls across various layers, including operating systems, container orchestration, CI/CD pipelines, cloud configuration, and network boundaries.
Responsibilities:
- Act as the technical lead for security across application, cloud, and infrastructure
- Design and build security controls to defend against sophisticated adversaries and insider threats
- Revamp patching cycles and golden-image refreshes to enable fast movement without sacrificing safety
- Identify areas for improvement in security and remediation processes and propose better approaches
- Set the technical approach across the full security scope, prioritizing by risk in line with industry best practices
- Raise the technical bar by reviewing fixes and mentoring engineers
- Own clear reporting and metrics, and build runbooks, standards, and escalation paths
Requirements:
- 8+ years of hands-on experience in security engineering, vulnerability management, or cloud and infrastructure security
- Deep understanding of security principles, common vulnerabilities, and best practices across application, cloud, and infrastructure layers
- Working command of vulnerability management at scale, including prioritization frameworks and CISA guidance
- Breadth across the security stack, including application and dependency vulnerabilities, infrastructure patching, and cloud configuration
- Track record of designing and improving technical processes
- Strong judgment on balancing risk reduction against operational and customer impact
- Excellent written and verbal communication skills
Benefits:
- Hybrid work model
- Flexibility and work-life balance
- Career development and growth opportunities
- Industry-competitive benefits, including comprehensive health, dental, vision, disability, and life insurance programs
- Retirement savings and tuition reimbursement
- Employee incentive programs and resources for mental, physical, and financial wellbeing