Cybersecurity Platform Manager

At HDR, our employee-owners are fully engaged in creating a welcoming environment where each of us is valued and respected, a place where everyone is empowered to bring their authentic selves and novel ideas to work every day. As we foster a culture of inclusion throughout our company and within our communities, we constantly ask ourselves: What is our impact on the world?

Watch Our Story:' https://www.hdrinc.com/our-story'

Each and every role throughout our organization makes a difference in our ability to change the world for the better. Read further to learn how you could help make great things possible not only in your community, but around the world.

The Cybersecurity Platform Manager is a strategic leadership role responsible for the design, deployment, and operational excellence of HDR's core cybersecurity technology stack. This role serves as the principal owner of key enterprise security platforms and is critical to maintaining a robust defense across our global IT environments.

Working closely alongside peers in Cyber Operations, Cyber GRC, and Identity & Access Management (IAM) to ensure a cohesive and integrated security posture. This position leads a team of cybersecurity engineers to ensure our security platforms are expertly integrated, continuously optimized, and aligned with organizational risk and regulatory requirements. The successful candidate will combine technical expertise with strategic vision to safeguard HDR's critical systems and data.

Strategic & Leadership Responsibilities

Team Leadership: Manage and mentor a team of cybersecurity engineers, driving staff development, performance management, and fostering a culture of technical excellence and accountability.

Platform Roadmap Ownership: Develop and maintain a multi-year technology roadmap for all security platforms, aligning investment with business goals and industry best practices.

Budget & Vendor Management: Collaborate with Cybersecurity Director on platform budgeting, engage with vendors to maintain strong partnerships, and contribute to software licensing discussions to support cost-effective security solutions.

Cross-Functional Partnership: Collaborate with IT, Legal, Risk, and Executive teams to integrate security platforms and ensure adherence to relevant security regulations and standards.

Technical & Operational Responsibilities

Own the Security Stack: Serve as the subject matter expert for key cybersecurity platforms, including Security Information and Event Management (SIEM), Endpoint Detection and Response (EDR), Vulnerability Management (VM), and Identity and Access Management (IAM) systems.

Deployment and Integration: Oversee the entire lifecycle of security tools, from selection and proof-of-concept through deployment, configuration, and integration with other internal systems (e.g., CMDB).

Operational Excellence & Automation: Drive continuous process improvement and champion automation initiatives (e.g., SOAR) to reduce manual effort, enhance scalability, and improve incident response efficiency.

Architecture & Design: Partner with Technology Architects to ensure platform capabilities are utilized to their full potential to support new, scalable, and secure engineering and business initiatives.

Incident Response & Reporting

Incident Support: Provide Tier 3 escalation support for platform-specific security incidents, assisting the Security Operations Center (SOC) team with technical troubleshooting and root cause analysis.

Performance and Reporting: Monitor platform health and prepare clear, concise reports on security status, risks, and performance metrics for senior leadership.

Preferred Experience and Skills

Minimum 5 years of progressive experience in Information Security

Minimum 2 years managing a team of engineers and enterprise security platforms.

Hands-on expertise with at least two major security product categories (e.g., SIEM, EDR, IAM).

Excellent communication, negotiation, and stakeholder management skills.

Strong knowledge of cybersecurity technologies, protocols, and best practices.

Experience in risk assessment, incident response, and security operations.

Proven ability to lead and mentor technical teams.

Familiarity with regulatory frameworks.

Excellent communication, negotiation, and stakeholder management skills.

Ability to manage multiple projects and priorities in a fast-paced environment

Professional certifications such as CISM, CISSP, ISSMP, or equivalent.

Experience managing security in a consulting or engineering firm with a global footprint.

Strong understanding of Zero Trust principles and modern security architecture.

Proficiency with VMware Cloud Foundation (VCF) security features, including native encryption and compliance kits, to meet specific regulatory requirements.

Demonstrated understanding of how core VCF components (vCenter, SDDC Manager, NSX) integrate seamlessly with enterprise-level Identity and Access Management (IAM) systems.

#LI-KV1