Director of Cybersecurity Engineering

About the role

Recruit
22 is seeking a Director of Cybersecurity Engineering on behalf of a major healthcare organization. This senior leadership role is responsible for building, operating, and modernizing the enterprise security engineering program across clinical and corporate environments. The ideal candidate brings a blend of deep technical expertise, leadership experience, and strategic vision, capable of driving engineering excellence while partnering across IT, clinical operations, and business units.

This leader will play a critical role in strengthening security posture, supporting regulatory compliance (HIPAA/HITECH, HITRUST, NIST), and enabling secure innovation at scale.

• Team Leadership and Development
  • Lead, mentor, and develop 5‑6 cybersecurity engineers across endpoint, cloud, network, application, data security, and vulnerability domains.
  • Establish performance goals, engineering standards, and growth plans.
  • Build a culture centered on ownership, accountability, and continuous improvement.
• Security Engineering and Architecture
  • Define and execute the cybersecurity engineering roadmap aligned to risk, regulatory requirements, and clinical continuity needs.
  • Drive modernization initiatives, including Zero Trust, identity modernization, cloud security posture improvements, and data protection strategies.
  • Build scalable engineering standards, reference architectures, and reusable security patterns.
• Technology Ownership and Operational Excellence
  • Oversee the implementation, tuning, and day‑to‑day operations of security technologies such as Endpoint Security / EDR / XDR, Email Security, SIEM/SOAR integrations, Vulnerability Management, WAF/API Security, DLP/Data Protection, IAM/PAM, Cloud Security Posture Management, and Network Security & Segmentation.
  • Develop and enforce repeatable engineering practices, including design reviews, runbooks, change control, and documentation standards.
• Cross‑Functional Collaboration
  • Partner with Infrastructure, Cloud, Dev Ops, Application Engineering, and Data/Analytics teams to embed security into delivery pipelines (secure‑by‑design, Dev Sec Ops , IaC controls).
  • Influence technical and vendor decisions through due diligence, architecture reviews, and risk‑based recommendations.
• Incident Readiness and Response
  • Serve as escalation point for high‑severity incidents and complex engineering challenges.
  • Ensure engineering readiness through strong logging, containment controls, segmentation, identity protections, and recovery hardening.
  • Lead post‑incident remediation efforts with measurable improvements to enterprise controls.
• Governance, Metrics, and Reporting
  • Develop meaningful KPIs to measure engineering maturity, control performance, and roadmap progress.
  • Present security risks, technology tradeoffs, and investment recommendations to executive leadership.

• 12+ years of progressive cybersecurity experience, including 5+ years leading security engineering teams.
• Strong experience in complex, regulated environments; healthcare experience strongly preferred.
• Expertise across multiple cybersecurity domains:
  • EDR/XDR
  • Cloud Security (AWS/Azure/GCP)
  • Network Security & Segmentation
  • Vulnerability Management
  • IAM/PAM
  • Application Security
  • Data Security / DLP
• Strong understanding of healthcare security and regulatory frameworks (HIPAA/HITECH, HITRUST, NIST).
• Proven ability to turn risk insights into actionable engineering roadmaps and deliver results across matrixed organizations.
• Exceptional written and verbal communication skills, including executive‑level presentations.

• Bachelor’s degree in Computer Science, Information Security, Engineering, or related field (Master’s preferred).
• Preferred certifications: CISSP, CISM, CCSP, cloud provider certifications (AWS or Azure), and relevant GIAC credentials.

• Demonstrated ability to build, scale, and develop high‑performing engineering teams.
• Strong architectural judgment and systems‑thinking capability.
• Effective in navigating ambiguity, prioritizing complex workloads, and influencing stakeholders across IT and clinical environments.
• Committed to operational rigor, automation, and continuous improvement.