Principal Cybersecurity Engineer

$116,700 - $218,300/Yr

Liberty Mutual - Portsmouth, NH

Full-time - Principal

Portsmouth, NH

Insurance Carriers and Related Activities

About the position

The Principal Cybersecurity Engineer at Liberty Mutual Insurance plays a crucial role in safeguarding the organization's information systems and data. Under general direction, this position is responsible for designing, implementing, managing, and monitoring the overall security posture of Liberty Mutual's physical data centers and cloud environments. The role requires collaboration with various teams across the company to continually optimize security measures while ensuring the reliability and stability of business environments. This position is supported by light coaching and mentorship, allowing for professional growth and development in a dynamic work environment. In this role, the Principal Cybersecurity Engineer will support secure application development initiatives that require innovation, automation, and integration. The engineer will collaborate closely with developers and engineers in the US Retail Market (USRM) to produce secure applications and implement necessary cybersecurity controls. Additionally, the engineer will manage, develop, deploy, and support security solutions globally, which includes regional data centers, local offices, and cloud environments. The position also involves supporting security incidents, service delivery, technology configuration and lifecycle, as well as conducting technical security investigations and forensic collection. As a leading team member, the Principal Cybersecurity Engineer will support security projects or subprojects of increasing complexity and act as a key member of an agile team. This includes providing cybersecurity consultation services to business operations, identifying business process improvements, and addressing complex functional and technology gaps. The engineer must be proficient in various cybersecurity technologies and IT concepts, demonstrating excellent negotiation, communication, and consultative skills. Leadership within agile working environments, including SCRUM and KANBAN, is essential, along with collaboration, prioritization, and adaptability skills.

Responsibilities

• Support secure application development initiatives requiring innovation, automation, and integration.
• Collaborate with developers and engineers in the US Retail Market (USRM) to produce secure applications and implement cybersecurity controls.
• Manage, develop, deploy, and support security solutions globally, including regional data centers, local offices, and cloud environments.
• Support security incidents, service delivery, technology configuration and lifecycle, and technical security investigations and forensic collection.
• Serve as a leading team member supporting security projects or subprojects of increasing complexity.
• Act as a leading member of an agile team focused on providing support to the analysis, system design, documentation, testing, and implementation of highly complex security operations and processes.
• Provide cybersecurity consultation services to business operations, key business decisions, and technology implications within a single business process.
• Identify business process improvements that address highly complex functional and technology gaps within a single business process.

Requirements

• Bachelor's or Master's degree in technical discipline or equivalent experience, technical degree preferred.
• Generally, 8+ years of professional experience.
• Industry cybersecurity and/or technology certifications are preferred.
• Security+ or comparable certification/experience is required (must obtain within 6 months if not possessed).
• Proficient in many and expert in some cybersecurity technologies, IT concepts, strategies, and methodologies, as well as security aspects of multiple platforms, operating systems, software, communications, and network protocols.
• Excellent negotiation skills; oral and written communication skills, and consultative skills, including the ability to understand and assist in meeting customer requirements.
• Demonstrated leadership within agile working environments to include both SCRUM and KANBAN.

Nice-to-haves

• SANS Certifications, ideally GCIH, GCFE, GREM, GCFA; CSSLP.
• Certified Secure Software Lifecycle Professional; GSSPJAVA/.NET.
• Secure Software Programmer Java; GWEB Certified web application defender; CASE Java/.NET Certified Application Security Engineer Java; CASS Certified Application Security Specialist.
• Advanced proficiency across architectural analysis, business analysis and financial disciplines, security and compliance, data integration and analytics, social networking, computational thinking, and mobile competency.
• Expert proficiency in dimensional and lateral thinking, application delivery, system and technology integration, system software infrastructure, and workplace adaptability.

Benefits

• Comprehensive health insurance coverage.
• 401k retirement savings plan with matching contributions.
• Paid time off and holidays.
• Tuition reimbursement for further education.
• Professional development opportunities and training programs.
• Flexible work arrangements, including remote work options.