Job Summary
Seeking a Senior Cybersecurity Engineer with strong M&A cybersecurity due diligence and post-acquisition integration experience. The ideal candidate will be hands-on across enterprise security domains and able to assess security controls, identify risks, and develop Day 1/Day 100 integration plans.
Key Responsibilities
- Conduct cybersecurity due diligence for acquisition targets and identify technical/security risks.
- Validate security configurations and controls across endpoint, identity, network, cloud, and infrastructure.
- Perform compromise assessments, threat hunting, endpoint triage, and IoC analysis.
- Assess firewalls, IDS/IPS, proxies, WAF, VPN, ZTNA, network segmentation, and SSL/TLS controls.
- Evaluate IAM technologies including SAML, OAuth, MFA, federation, PAM, and Zero Trust.
- Assess PKI, certificate management, email security, SPF/DKIM/DMARC, and SIEM/logging environments.
- Develop Day 1/Day 100 integration plans, remediation roadmaps, and tooling consolidation strategies.
- Work with platforms such as CrowdStrike, Zscaler, Splunk, Wiz, and Microsoft security technologies.
- Gather infrastructure/security metrics from AD, cloud, CMDB, endpoint management, vulnerability scanners, and SIEM platforms.
- Communicate technical findings and recommendations to engineering teams and executive stakeholders.
Required Qualifications
- 8+ years of cybersecurity engineering/security architecture experience.
- Strong hands-on experience across endpoint, identity, network, cloud, and infrastructure security.
- Extensive M&A due diligence and/or post-acquisition integration experience.
- Experience with threat hunting, incident response, security assessments, and remediation.
- Strong technical documentation and stakeholder communication skills.