{"id":1663515,"url":"https://alion.io/job/altera-infrastructure-cyber-defense-leader","title":"Infrastructure Cyber Defense Leader","company":{"id":5328,"name":"Altera","domain":"altera.com","url":"https://alion.io/company/altera","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"A","score":91,"open_postings":16,"ghost_share":0,"stale_share":0.313,"repost_share":0.063,"time_to_fill_p50_days":57,"computed_at":"2026-10-19T05:45:15Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Jose, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":187000,"max":270000,"currency":"USD","period":"year","gross":null,"usd_annual":270000},"salary_estimate":null,"experience_years_min":10,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CI/CD","optional":false},{"name":"Configuration Management","optional":false},{"name":"DNS","optional":false},{"name":"IAM","optional":false},{"name":"Kubernetes","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Microsoft Defender for Cloud","optional":false},{"name":"Microsoft Entra ID","optional":false},{"name":"Microsoft Sentinel","optional":false},{"name":"NIST CSF","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Platform Engineering","optional":false},{"name":"SBOM","optional":false},{"name":"SOC 2","optional":false},{"name":"Threat Modeling","optional":false},{"name":"Vault","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false},{"name":"Zero Trust","optional":false}],"status":"live","first_seen_at":"2026-10-01T00:00:00Z","employer_posted_date":"2026-10-01","last_verified_at":"2026-10-19T00:25:29Z","board_verified":true,"closed_at":null,"days_open":19,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":19},"description":"Job Details:\nJob Description:\nAbout the Role\nAltera is seeking a technically capable Infrastructure Cyber Defense Leader to lead enterprise infrastructure security strategy, operations, and continuous improvement across network, cloud, on-premises, and hybrid technology environments.\nThe role will oversee network security, cloud security, infrastructure protection, vulnerability management, security architecture, cyber resilience, and risk assessment activities. The successful candidate will help protect semiconductor design environments, operations, intellectual property, corporate systems, engineering platforms, and critical business services.\nThis position will work closely with Information Security, Infrastructure, Cloud, Network Engineering, IT Engineering, IT Operations, Compliance, Legal, Internal Audit, and business stakeholders. It is best suited for a hands-on security leader who can translate enterprise risk into practical security controls, measurable outcomes, and resilient technology architectures.\nWhat You’ll Do\nInfrastructure Defense Strategy and Operations\nLead the strategy, operating model, and day-to-day execution of infrastructure defense capabilities across enterprise, cloud, data center, remote access, and engineering environments. \nEstablish security standards, operating procedures, control objectives, service-level expectations, and performance metrics for infrastructure security. \nAssess infrastructure risks and prioritize remediation based on business criticality, exploitability, exposure, and potential impact to production, engineering, intellectual property, and customer commitments. \nDevelop and maintain infrastructure security roadmaps aligned to business priorities, technology strategy, threat intelligence, and applicable security frameworks. \nMonitor operational performance, control effectiveness, open risks, exceptions, remediation commitments, and unresolved security gaps. \nIdentify opportunities to improve automation, visibility, control consistency, operational efficiency, and cyber resilience. \nNetwork Security\nOversee enterprise network security capabilities, including firewalls, secure web gateways, intrusion prevention, network segmentation, remote access, DNS security, DDoS protection, and network monitoring. \nPartner with Network Engineering to design and implement secure connectivity across corporate, cloud, data center, engineering and third-party environments. \nImprove segmentation and access controls for sensitive semiconductor design assets, production systems, engineering networks, and high-value intellectual property. \nReview network security configurations, rule sets, architecture changes, and exceptions to ensure alignment with approved standards. \nEstablish measurable improvements in network visibility, control coverage, policy hygiene, and response readiness. \nSupport investigation and remediation of network-based threats, misconfigurations, unauthorized access, and control failures. \nCloud Security - Azure and AWS\nLead security architecture, governance, and operational control implementation across Microsoft Azure, Amazon Web Services, and hybrid cloud environments. \nDefine and enforce cloud security standards for identity, access management, network controls, encryption, logging, monitoring, secrets management, workload protection, and data security. \nOversee security posture management and remediation activities across Azure and AWS accounts, subscriptions, landing zones, and cloud workloads. \nPartner with Cloud Engineering and DevOps teams to integrate security into infrastructure-as-code, CI/CD pipelines, container platforms, serverless services, and platform engineering practices. \nImprove cloud detection, logging, configuration compliance, vulnerability visibility, and incident response readiness. \nReview cloud architecture designs and technology changes for security risks, control gaps, resilience implications, and regulatory requirements. \nSupport cloud migration and modernization initiatives by embedding secure-by-design principles into solution delivery. \nApplication Security and DevSecOps\nLead and mature application security and DevSecOps capabilities across internally developed applications, APIs, cloud-native services, and engineering platforms. \nEstablish secure SDLC requirements, application security standards, security review processes, and security control expectations. \nPartner with Software Engineering, DevOps, Platform Engineering, and Cloud teams to integrate security into development, testing, CI/CD pipelines, infrastructure-as-code, containers, Kubernetes platforms, and software delivery processes. \nOversee application security testing capabilities including SAST, DAST, SCA, secrets detection, API security testing, container security scanning, and infrastructure-as-code security assessments. \nFacilitate threat modeling, secure design reviews, secure coding initiatives, and risk assessments for new applications and major technology changes. \nEstablish risk-based remediation processes and performance metrics for application security findings and software supply-chain risks. \nCoordinate application penetration testing, remediation validation, and secure release readiness activities. \nImprove software supply-chain security through dependency governance, SBOM visibility, artifact integrity controls, and code-signing practices. \nInfrastructure Security and Cyber Resilience\nProtect compute, storage, virtualization, operating systems, databases, endpoints, identity infrastructure, backup platforms, and other foundational technology services. \nAssess technology dependencies and identify breaking points that could affect the recoverability and availability of critical business. \nDrive initiatives that strengthen infrastructure resilience against ransomware, destructive attacks, identity compromise, cloud disruption, and technology failures. \nPartner with IT Operations and Disaster Recovery teams to validate backup protection, recovery controls, restoration procedures, and resilience assumptions. \nSupport infrastructure hardening, secure configuration management, privileged access controls, endpoint protection, and administrative activity monitoring. \nLead infrastructure security reviews for new platforms, major changes, acquisitions, third-party services, and high-risk technology implementations. \nVulnerability Management\nLead the enterprise vulnerability management program across network devices, servers, endpoints, cloud resources, applications, containers, engineering systems, and assets. \nEstablish risk-based prioritization, remediation service levels, exception processes, escalation paths, and executive reporting. \nImprove asset inventory accuracy, scanning coverage, authenticated scanning, cloud visibility, vulnerability validation, and remediation tracking. \nPartner with Infrastructure, Cloud, Application, Engineering, and IT teams to reduce exposure to critical and actively exploited vulnerabilities. \nTrack remediation performance using measurable indicators such as critical vulnerability aging, remediation timeliness, exposure reduction, asset coverage, and exception closure. \nCoordinate vulnerability assessments, penetration testing, configuration reviews, attack-surface assessments, and remediation validation. \nProvide risk-based reporting to security leadership, technology owners, audit teams, and executive stakeholders. \nSecurity Architecture and Risk Assessments\nLead security architecture reviews for infrastructure, cloud, network, identity, data center, and technology transformation initiatives. \nTranslate business and technical requirements into secure, scalable, and resilient architecture patterns. \nConduct risk assessments that identify control gaps, attack paths, dependencies, concentration risks, and potential business impacts. \nReview proposed designs, technology changes, exceptions, and compensating controls against enterprise security standards. \nMaintain architecture principles, reference designs, control requirements, decision records, and security review documentation. \nFacilitate structured discussions with technical teams to evaluate technology landscapes against security, resilience, and recovery requirements. \nProvide practical recommendations that balance risk reduction, operational feasibility, performance, availability, and business timelines. \nGovernance, Reporting, and Continuous Improvement\nEstablish infrastructure defense governance meetings, action tracking, escalation processes, and cross-functional follow-up. \nPrepare dashboards and management reports covering: \nVulnerability exposure and remediation performance \nNetwork and cloud control coverage \nSecurity architecture review status \nOpen risks, exceptions, and remediation commitments \nCloud security posture and configuration compliance \nCritical asset protection \nInfrastructure resilience and recovery readiness \nConduct periodic quality reviews of security assessments, architecture decisions, remediation evidence, control performance, and operational outcomes. \nIdentify and implement improvements to infrastructure defense maturity, automation, data quality, operational efficiency, and stakeholder adoption. \nTechnical Skills and Technologies\nNetwork Security: Next-generation firewalls, secure web gateways, VPN, ZTNA, IDS/IPS, DDoS protection, DNS security, network access control, segmentation, and network traffic analysis. \nAzure Security: Microsoft Defender for Cloud, Microsoft Sentinel, Microsoft Entra ID, Azure Policy, Azure Firewall, Azure Key Vault, Azure Monitor, Azure Networking, Azure Security Center capabilities, and Azure landing zones. \nAWS Security: AWS Security Hub, GuardDuty, Inspector, IAM, Organizations, Control Tower, CloudTrail, AWS Config, KMS, VPC security, and centralized logging. \nInfrastructure Security: Windows and Linux security, endpoint protection, server hardening, virtualization, storage, databases, backup platforms, privileged access, patch management, and configuration management. \nVulnerability Management: Vulnerability scanners, attack-surface management, penetration testing, configuration assessment, remediation tracking, exception management, and risk-based prioritization. \nSecurity Architecture: Zero Trust, secure network architecture, cloud reference architectures, identity-centric security, segmentation, encryption, resiliency, and secure-by-design reviews. \nSecurity Frameworks: NIST CSF, NIST SP 800-53, CIS Controls, ISO/IEC 27001, IEC 62443, SOC 2, and SOX/ITGC. \nApplication Security: Secure SDLC, threat modeling, secure coding, SAST, DAST, software composition analysis, API security testing, application penetration testing, dependency management, and security review processes. \n DevSecOps & Software Supply Chain Security: CI/CD security, infrastructure-as-code security, secrets management, container security, Kubernetes security, software bill of materials (SBOM), artifact integrity, code signing, policy-as-code, and automated security controls. \nLeadership and People Management\nLead and develop infrastructure security, network security, cloud security, application security, DevSecOps, vulnerability management, cyber resilience, and security architecture capabilities. \nEstablish clear objectives, role expectations, operating rhythms, quality standards, and performance measures. \nCoach team members through technical assessments, architecture decisions, risk discussions, stakeholder interactions, and career development. \nCoordinate internal teams, technology owners, and service providers through clear accountability and escalation processes. \nPromote secure-by-design thinking, disciplined documentation, knowledge sharing, automation, and continuous learning. \nFoster a culture of operational ownership, timely escalation, practical risk management, and measurable improvement. \nStakeholder Management\nPartner with the CISO organization, CIO, IT Infrastructure, Network Engineering...","description_format":"text","description_chars":19308,"description_truncated":true,"requirements":{"experience_years_min":10,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":["Continuous learning"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","C4ISR","Processors, MCUs & AI Chips","Application Security"],"lifecycle":[{"event":"open","at":"2026-10-02T04:56:29Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 71","filings_12m":71,"filings_prev_12m":39,"green_card_filings_12m":0,"median_offered_wage_usd":157500,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)"],"filings_for_role_12m":1}],"liveness":{"score":89,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.89,"p_room":1,"age_days":18,"expected_fill_days":57,"reasons":["conf:5","velocity","win:early","comp:brand"],"computed_at":"2026-10-19T05:45:15Z"},"pay":{"stated_usd_annual":270000,"is_top_pay":true},"html_url":"https://alion.io/job/altera-infrastructure-cyber-defense-leader","json_url":"https://alion.io/job/altera-infrastructure-cyber-defense-leader.json","meta":{"generated_at":"2026-10-20T03:46:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4212,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-21T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":5328},"rest":"https://alion.io/mcp/rest/get_company?id=5328"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Faltera-infrastructure-cyber-defense-leader"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Faltera-infrastructure-cyber-defense-leader"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Faltera-infrastructure-cyber-defense-leader"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/altera-infrastructure-cyber-defense-leader\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Faltera-infrastructure-cyber-defense-leader"}]}