Dir Cyber Security Engineering at Altice USA | Bethpage, NY, US | Rezi

Dir Cyber Security Engineering at Altice USA

Dir Cyber Security Engineering

Altice USA · Bethpage, NY, US

1 weeks ago

Dir Cyber Security Engineering

Altice USA · Bethpage, NY, US

12 days ago
Resume preview

Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now
Resume preview

Tailor your resume to this Dir Cyber Security Engineering role.

Rezi rewrites your resume against Altice USA's job description. Free.

Resume score gauge reading 58 out of 100

Don't guess if your resume is good enough.

See how it scores against the Dir Cyber Security Engineering posting at Altice USA — free, in seconds.

About the Role

As the Director of Cyber Security Engineering, you will lead the strategic vision and implementation of advanced security frameworks, leveraging automation and AI/ML to enhance threat detection, response, and secure digital transformation across hybrid and multi-cloud environments. This role requires deep expertise in Zero Trust Architecture, SASE, CSPM, AI/ML, DevSecOps practices, NDR, WAF and Firewalls. You will oversee a team of security professionals and collaborate with IT, Architecture, engineering, and business units to ensure the protection of Optimum’s assets. The Director will be a forward-thinking leader with a passion for innovation, resilience, and secure digital transformation.

Responsibilities

  • Develop and execute a comprehensive Cyber Security strategy aligned with business objectives.
  • Oversee platform engineering for security controls: VPAM/PKI, key management/HSM, log pipelines, DDoS, WAF, remote access, and network firewalls.
  • Engineer and operate DDoS scrubbing/runbooks; authoritative DNSSEC and WAF hygiene for customer-facing properties; coordinate policy distribution with backbone automation/orchestration.
  • Lead the adoption of Zero Trust Architecture and SASE frameworks across enterprise and cloud environments.
  • Enforce Secure by Design guardrails for all Cloud and AI workloads (data boundaries, private tenancy, model and prompt protections).
  • Implement vendor security management enforced with Zero Trust Networking concepts.
  • Oversee Cloud Security Posture Management (CSPM) and Cloud Workload Protection (CWPP) tools.
  • Collaborate with DevOps teams to embed and maintain security into CI/CD pipelines (DevSecOps) for cloud deployments.
  • Incorporate AI/ML-driven practices to enhance cybersecurity posture, improve threat detection and response times, and ensure a more secure digital transformation.
  • Enhance the security of corporate AI/ML initiatives, protect sensitive data, and aid the development of resilient systems that drive innovation while maintaining trust and compliance.
  • Own the day-to-day operation, availability, and performance of enterprise security platforms, including firewalls, WAF, DDoS protection, SASE, VPAM, PKI, HSM, and security log pipelines.
  • Establish and maintain a 24x7 on-call model for security engineering, with defined escalation paths and service levels for platform incidents and customer-impacting events.
  • Serve as the Tier 3 engineering escalation point for the Security Operations Center during active incidents, including emergency blocks, rule changes, and DDoS mitigation.
  • Manage the security policy and rule change process for firewalls, WAF, and proxies so that every change is requested, peer reviewed, tested, and recorded through enterprise change management.
  • Drive patching, upgrades, and end-of-life replacement of security infrastructure so platforms remain on supported and hardened versions.
  • Oversee certificate and key lifecycle operations, including issuance, renewal, revocation, and expiration monitoring, to prevent service outages caused by expired certificates.
  • Maintain configuration baselines for security platforms and monitor for drift, unauthorized changes, and unused or overly permissive rules.
  • Develop and keep current the operational runbooks, standard operating procedures, and disaster recovery plans for each security platform, and test failover on a regular schedule.
  • Automate routine operational work such as rule provisioning, health checks, and reporting to reduce manual effort and error.
  • Track operational metrics such as platform uptime, change success rate, mean time to restore, and ticket backlog, and report them to security leadership.
  • Provide audit evidence and support control testing for PCI, SOX, and other regulatory and internal requirements that depend on security platform operations.
  • Manage vendor support relationships, maintenance contracts, and license renewals for security engineering tools.
  • Coordinate capacity planning for security platforms with network and cloud engineering ahead of traffic growth and new service launches.

Requirements

  • Bachelor’s degree in computer science preferred, Cybersecurity, or related field experience; Master’s preferred.
  • 15+ years of cybersecurity leadership experience, including network and cloud security or related field experience.
  • Experience with AWS, Azure, and GCP security controls.
  • Expertise in Zero Trust, SASE, CASB, CSPM, CWPP, NDR, AI/ML Security, WAF, and Firewalls.
  • Proven experience on utilizing automation best practices to drive efficiencies and cost savings.
  • Strong understanding of security protocols, cryptography, authentication, and authorization.
  • Proven ability to lead cross-functional teams and manage complex projects.
  • Experience leading security engineering operations teams in a 24x7 production environment, including on-call and change management practices.
  • Excellent communication and stakeholder engagement skills.
  • Relevant certifications a plus: CISSP, CCSP, CISM, AWS Security Specialty, Azure Security Engineer, GCP.
  • Applicants must be authorized to work for ANY employer in the U.S.
  • Do not provide money (even if reimbursable) as part of the job application or hiring process.

Skills

  • Zero Trust Architecture
  • SASE
  • CSPM
  • AI/ML
  • DevSecOps
  • NDR
  • WAF
  • Firewalls
  • VPAM/PKI
  • Key management/HSM
  • Log pipelines
  • DDoS
  • Remote access
  • Network firewalls
  • DNSSEC
  • Cloud Security Posture Management (CSPM)
  • Cloud Workload Protection (CWPP)
  • CI/CD pipelines
  • Security protocols
  • Cryptography
  • Authentication
  • Authorization
  • AWS security controls
  • Azure security controls
  • GCP security controls
  • Automation
  • CISSP
  • CCSP
  • CISM
  • AWS Security Specialty
  • Azure Security Engineer
  • GCP

Location

  • New York

Work Type

  • Full-time

Experience Level

  • 15+ years of cybersecurity leadership experience

Education Level

  • Bachelor’s degree in computer science preferred, Cybersecurity, or related field experience; Master’s preferred.

Salary/Compensations

  • $155,509.00 - $255,479.00 / year

About the Company

  • Optimum is a leader in the fast-paced world of connectivity.
  • Our successes, now and in the future, are powered by our amazing product, a commitment to our people and culture, and the connections we make in our communities.
  • At Optimum, every action and interaction we take part in, is driven by our three Guiding Principles: Do What’s Right, Drive One Optimum, and Make It Happen.
  • Our employees are empowered to do the right thing for our customers and co-workers and to recognize and reward these behaviors when we see them.
  • It’s all part of the bigger picture of “Be The Difference” where each employee knows they have the power to enact real change, share new ideas, and understand that learning never stop.

Equal Opportunity

  • We are an Equal Opportunity Employer committed to recruiting, hiring and promoting qualified people of all backgrounds regardless of gender, race, color, creed, national origin, religion, age, marital status, pregnancy, physical or mental disability, sexual orientation, gender identity, military or veteran status, or any other basis protected by federal, state, or local law.
  • The Company collects personal information about its applicants for employment that may include personal identifiers, professional or employment related information, photos, education information and/or protected classifications under federal and state law. This information is collected for employment purposes, including identification, work authorization, FCRA-compliant background screening, human resource administration and compliance with federal, state and local law.
  • Applicants for employment with The Company will never be asked to provide money (even if reimbursable) as part of the job application or hiring process. Please review our Fraud FAQ for further details.
  • We do not provide visa sponsorship for employment.