Job description

Every moment of every day, people around the world rely on the energy they access through infrastructure built by Quanta. Comprising the largest skilled-labor force in North America, our employees are highly skilled and innovative, continually working to connect people and power. We’re building the infrastructure that supports the energy transition, and there are more opportunities than ever to be part of our team. Join us and build your career building a brighter future. Imagine what you could do here. We encourage, inspire, and support our people to seize opportunities in our corporate office and with hundreds of our operating companies worldwide that provide solutions for the utility, renewable energy, electric power, industrial, and communications industries. Quanta actively promotes and maintains a culture of belonging where all employees can be themselves, live their values, and find opportunities to succeed. When you join our team, you join a dynamic organization in which career development is encouraged, excellence is rewarded, and diversity is prized. Come find out how our people power modern life. The Senior Manager, Security Engineering leads the team that designs, builds, and runs Quanta's security technology. This is a hands-on engineering leadership role. You will own the security platform stack and its integrations, drive the security engineering side of mergers and acquisitions, and set the technical direction your team builds against. Quanta is large and decentralized, with hundreds of operating companies and tens of thousands of endpoints across corporate and field locations. The role suits an engineer who can standardize, automate, and integrate security across many autonomous business units rather than one uniform estate. You will lead a small team of security engineers and are expected to understand the major areas of security, including endpoint, network, identity, cloud, vulnerability management, and penetration testing. You will own the ones this role is accountable for, and guide the team and partner with the functions that own the rest. This is an engineering role focused on building and hardening security capability, not a monitoring or on-call operations role. The role calls for strong hands-on engineering depth alongside the leadership skills to run a team and the communication skills to explain technical risk to executives. Security Platform Engineering •Own the security platform stack end to end. For each platform, design, deploy, configure, tune, upgrade, integrate, and eventually retire it, and keep ownership and documentation current. The stack covers endpoint protection, the SIEM and security data pipeline, security automation, email security, secure web and private access, PAM, and EPM. •Build and maintain the integrations that connect security platforms to one another and to enterprise systems, including API and connector development. •Engineer and enforce cloud security controls on the approved cloud platforms, including guardrails, workload identity, logging, encryption, and prevention of public exposure. •Continuously verify that deployed controls work as designed, and fix what does not. •Lead platform consolidation and migration programs, from selection and parallel run through cutover and decommissioning of legacy tooling. Mergers, Acquisitions, and Integration •Lead the security engineering side of mergers and acquisitions, starting with pre-close technical due diligence of a target's identity, endpoint, network, and cloud posture. • Plan and run post-close integration: onboard acquired environments onto enterprise security tooling and telemetry, consolidate tenants and domains, and sequence remediation of inherited exposure. •Support divestitures and carve-outs, including data segregation, access removal, and telemetry separation. •Standardize security controls across newly acquired and existing operating companies, working with local IT leaders in a decentralized model. Technical Leadership and Breadth •Lead, mentor, and develop a small team of security engineers, and own hiring, performance management, and career growth. •Provide senior technical guidance across the adjacent domains the team works in, including identity security, vulnerability management, and penetration testing, partnering with the functions that own them. •Build and harden controls to the security architecture and standards set by the Security Architect, and provide engineering and feasibility input to design reviews and threat assessments. •Stay current on emerging technology relevant to the environment, including AI security, and guide how the team adopts and secures it. •Remove single points of knowledge through documentation, cross-training, and clear platform ownership. Vendors and Budget •Lead technical evaluation and selection of security platforms, and own the resulting vendor and provider relationships, including scope and service levels. •Negotiate statements of work and licensing, and own the security engineering budget and forecast, including license planning and cost optimization. •Establish regular cadence to report engineering metrics to leadership, including platform and control coverage, platform health, and open engineering risk. •Adheres to internal standards, policies and procedures. •Performs other duties as assigned. Required Education and Experience •Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field; or an equivalent combination of education and professional experience. •8+ years in IT and cybersecurity, including at least 5 years hands-on in security engineering or security architecture. •3+ years leading technical teams, including hiring and performance management. •Demonstrated end-to-end ownership of enterprise security platforms at significant scale (tens of thousands of endpoints or equivalent complexity), including design, deployment, integration, tuning, and migration. •Hands-on depth with endpoint protection and enterprise SIEM platforms, including building integrations and managing the security data pipeline. •Experience engineering cloud security controls on a major cloud platform (e.g., Microsoft Azure or AWS). •Experience leading the security engineering side of mergers, acquisitions, or large-scale environment integrations. •Broad understanding across the major areas of security, including endpoint, network, identity, cloud, vulnerability management, and penetration testing, with the depth to guide a team and partner with the functions that own the areas this role does not. •Ability to communicate credibly with engineers and executives, and to translate technical risk into business decisions. Preferred Education and Experience •Master's degree in Cybersecurity, Computer Science, Information Systems, or an MBA. •Experience in construction, utilities, energy, telecommunications, or another large, decentralized industry. •Hands-on experience with privileged access management and with secure web or private access platforms. •Scripting and API proficiency (e.g., Python, PowerShell, Microsoft Graph) for automation and integration. •Developing experience with different AI platforms. •Experience integrating many autonomous business units onto common security tooling. LICENSES / CERTIFICATIONS: Required Licenses/Certifications •Certified Information Systems Security Professional (CISSP) Preferred Licenses/Certifications •One or more of the following certifications ○Certified Information Security Manager (CISM) ○Microsoft Certified: Cybersecurity Architect Expert (SC-100) or Certified Cloud Security Professional (CCSP) ○AWS Certified Security Specialty ○GIAC Defensible Security Architecture (GDSA) or GIAC Certified Enterprise Defender (GCED) SUPERVISORY RESPONSIBILITIES: Supervises others: Yes Has hiring and terminating responsibilities: Yes Number of employees report to this job: 0 Subordinate Supervisory Employees, 3 to 6 Non-Supervisory Employees TRAVEL REQUIREMENTS: Travels: Yes Percent of time: 15% Overnight required: Occasionally Location: Hybrid All qualified applicants will receive consideration for employment and will not be discriminated against on the basis of race, color, religion, national origin or ancestry, sex (including gender, pregnancy, sexual orientation, and/or gender identity), age, disability, genetic information, veteran status, and/or any other basis protected by applicable federal, state or local law. We are an Equal Opportunity Employer, including disability and protected veteran status. We prohibit all types of discrimination and are committed to providing access and equal opportunity for individuals with disabilities. For additional information or if reasonable accommodation is needed to participate in the job application, interview, or hiring processes or to perform the essential functions of a position, please contact us the Company’s Human Resources department. Not ready to apply? Connect with us for general consideration.

Requirements

Must-haves

The role calls for strong hands-on engineering depth alongside the leadership skills to run a team and the communication skills to explain technical risk to executives.
Security Platform Engineering
•Build and maintain the integrations that connect security platforms to one another and to enterprise systems, including API and connector development.
•Engineer and enforce cloud security controls on the approved cloud platforms, including guardrails, workload identity, logging, encryption, and prevention of public exposure.
•Continuously verify that deployed controls work as designed, and fix what does not.
•Lead platform consolidation and migration programs, from selection and parallel run through cutover and decommissioning of legacy tooling.
Mergers, Acquisitions, and Integration
•Lead the security engineering side of mergers and acquisitions, starting with pre-close technical due diligence of a target's identity, endpoint, network, and cloud posture.
• Plan and run post-close integration: onboard acquired environments onto enterprise security tooling and telemetry, consolidate tenants and domains, and sequence remediation of inherited exposure.
•Support divestitures and carve-outs, including data segregation, access removal, and telemetry separation.
•Standardize security controls across newly acquired and existing operating companies, working with local IT leaders in a decentralized model.
Technical Leadership and Breadth
•Lead, mentor, and develop a small team of security engineers, and own hiring, performance management, and career growth.
•Provide senior technical guidance across the adjacent domains the team works in, including identity security, vulnerability management, and penetration testing, partnering with the functions that own them.
•Build and harden controls to the security architecture and standards set by the Security Architect, and provide engineering and feasibility input to design reviews and threat assessments.
•Stay current on emerging technology relevant to the environment, including AI security, and guide how the team adopts and secures it.
•Remove single points of knowledge through documentation, cross-training, and clear platform ownership.
Vendors and Budget
•Lead technical evaluation and selection of security platforms, and own the resulting vendor and provider relationships, including scope and service levels.
•Negotiate statements of work and licensing, and own the security engineering budget and forecast, including license planning and cost optimization.
•Establish regular cadence to report engineering metrics to leadership, including platform and control coverage, platform health, and open engineering risk.
•Adheres to internal standards, policies and procedures.

Nice-to-haves

Preferred Education and Experience
Preferred Licenses/Certifications

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

restapiaiazureawspython

Platform: icims
Effort: medium