{"id":1387531,"url":"https://alion.io/job/ecolab-director-of-security-engineering","title":"Director of Security Engineering","company":{"id":1754712,"name":"Ecolab","domain":"ecolab.com","url":"https://alion.io/company/ecolab-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":79,"open_postings":124,"ghost_share":0,"stale_share":0.839,"repost_share":0.016,"time_to_fill_p50_days":26,"computed_at":"2026-10-28T05:59:10Z"}},"role":"Leadership","role_family":"Leadership","seniority":"head","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Saint Paul, United States","Naperville, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":137400,"max":206200,"currency":"USD","period":"year","gross":null,"usd_annual":206200},"salary_estimate":null,"experience_years_min":12,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AWS","optional":false},{"name":"Azure","optional":false},{"name":"CIS Benchmarks","optional":false},{"name":"Claude","optional":false},{"name":"Copilot","optional":false},{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"GCP","optional":false},{"name":"NIST CSF","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"SIEM","optional":false},{"name":"Zero Trust","optional":false},{"name":"Least Privilege","optional":true},{"name":"Wiz","optional":true},{"name":"Zscaler","optional":true}],"status":"live","first_seen_at":"2026-07-17T00:00:00Z","employer_posted_date":"2026-07-17","last_verified_at":"2026-10-28T22:34:06Z","board_verified":true,"closed_at":null,"days_open":104,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":103},"description":"Job Summary: The Director of Security Engineering is responsible for leading enterprise security architecture, engineering, and exposure management programs. This role provides leadership for the technical security posture of a global Fortune 500 environment, owning the proactive side of security: architecture decisions, platform engineering, security standards enforcement, vulnerability and exposure management, and the initiatives that harden the environment before threats land.\nThe Director of Security Engineering leads architecture and engineering teams across endpoint, cloud, network, data protection, collaboration, and OT security while building a new Continuous Threat Exposure Management (CTEM) capability. The role combines strategic direction, platform and tooling decisions, cross-functional initiative delivery, and organizational leadership to drive measurable posture improvement across the enterprise.\nWhat You Will Do:\nTechnical Security Posture and Architecture\nOwn security architecture standards, benchmarks, and compliance posture for the enterprise aligned to CIS Benchmarks, NIST CSF 2.0, and platform hardening requirements.\n\nMake platform and tooling decisions across the security technology stack including endpoint, cloud, network, data protection, and collaboration security.\n\nLead security solution selection, evaluation, and implementation for new capabilities across multi-cloud, on-premises, and OT environments.\n\nGuide zero-trust architecture implementation including network segmentation, conditional access enforcement, and least-privilege design patterns.\n\nDrive security configuration standards and compliance across Azure, AWS, GCP, on-premises infrastructure, and industrial control system environments.\n\nExposure Management and CTEM\nStand up and operationalize the Continuous Threat Exposure Management function, directing a team of exposure analysts across infrastructure, cloud, application, and external attack surface domains.\n\nDefine and operationalize the CTEM cycle: discovery, prioritization (exploitability-weighted), mobilization, validation, and remediation tracking.\n\nEstablish and enforce vulnerability remediation SLAs with infrastructure, platform, and application teams across the enterprise.\n\nBuild executive-facing exposure reporting and risk quantification tied to business outcomes.\n\nDrive convergence of vulnerability scanning, cloud security posture management, and attack surface management into a unified exposure view.\n\nEngineering Operations and Platform Management\nOversee day-to-day security engineering including platform maintenance, incident support, approval workflows, and operational stability across the security tooling portfolio.\n\nManage the solution review and re-attestation process for enterprise technology including vendor evaluations and M&A security assessments.\n\nDrive automation of manual security processes including approvals, compliance checks, and configuration auditing.\n\nPartner with Observability and Automation teams on SIEM integration, security automation playbooks, and compliance dashboards.\n\nTranslate governance and compliance requirements from GRC into implemented technical controls, deploying and configuring security platforms to monitor and enforce policy compliance across the enterprise.\n\nOversee OT security assessments across global manufacturing sites, ensure regulatory compliance (NIS2, CFATS), and drive network segmentation programs for industrial environments.\n\nInitiative Delivery and Cross-Functional Leadership\nOrganize and prioritize work across multiple concurrent workstreams spanning endpoint hardening, cloud exposure remediation, network benchmarking, data protection, and OT security.\n\nUse modern tools including AI assistants (Claude, Copilot) to accelerate planning, analysis, documentation, and decision-making across the team.\n\nPresent program status, roadmaps, and investment cases to executive leadership with clarity and confidence.\n\nDrive cross-functional initiatives requiring coordination across infrastructure, networking, cloud platforms, and application teams.\n\nOrganizational and People Leadership\nLead and develop a distributed security organization consisting of managers, architects, and engineers across multiple technical domains.\n\nBuild organizational clarity across architecture, engineering, and the new exposure management function.\n\nProvide leadership in talent development, succession planning, coaching, performance management, and team engagement.\n\nManage staffing strategy across full-time employees, partners, and contingent resources to meet delivery needs.\n\nOversee third-party vendors and consulting partners supporting security programs and services.\n\nMinimum Qualifications:\nBachelor’s degree in Computer Science, Cybersecurity, Information Technology, Engineering, or a related discipline; equivalent experience may be considered.\n\n12+ years of progressive experience in cybersecurity, security architecture, security engineering, or vulnerability management.\n\n5+ years of leadership experience managing multi-team security functions at the Senior Manager or Director level.\n\nDemonstrated success delivering security initiatives through teams: hardening programs, platform deployments, and posture improvements completed on schedule.\n\nExperience managing 15+ person organizations including managers, architects, and engineers with varied technical specializations.\n\nExperience building new functions or teams, particularly in exposure management, vulnerability operations, or CTEM disciplines.\n\nBackground in cross-functional program delivery, driving remediation and compliance outcomes through teams not under direct reporting authority.\n\nTechnical and Functional Qualifications:\nStrong knowledge of cloud security architecture across Azure, AWS, and GCP including CSPM/CNAPP platforms, container security, and cloud-native controls.\n\nStrong knowledge of network security including next-generation firewalls, secure web gateways, network segmentation, DNS security, and zero-trust network access.\n\nExperience with endpoint security platforms (EDR), endpoint hardening, and CIS benchmark implementation at enterprise scale.\n\nKnowledge of data protection platforms (DLP), data classification, insider threat programs, and unstructured data controls.\n\nStrong knowledge of vulnerability and exposure management: scanning platforms, CTEM frameworks, attack surface management, exposure prioritization, and remediation SLA governance. Qualys experience strongly preferred.\n\nKnowledge of OT/ICS security including network segmentation for industrial environments, asset discovery, and regulatory frameworks (NIS2).\n\nFamiliarity with security architecture frameworks: CIS Benchmarks (multi-platform), NIST CSF 2.0, and zero-trust architecture principles.\n\nComfort with security automation platforms (SOAR) and AI-assisted workflows for accelerating team productivity and decision-making.\n\nPreferred Qualifications:\nExperience in a Fortune 500, global, manufacturing, or industrial environment with complex, heterogeneous technology estates.\n\nPrior experience standing up a CTEM, exposure management, or vulnerability operations function.\n\nFamiliarity with M&A security assessment processes and integrating acquisitions.\n\nBackground in OT/ICS security for manufacturing environments.\n\nFamiliarity with platforms such as Wiz, Zscaler, Palo Alto, Elastic, Armis, Qualys, or Swimlane.\n\nRelevant certifications such as CISSP, CISM, or technical certifications in cloud security, network security, or vulnerability management.\n\nLeadership Competencies\nOrganized and decisive leader who manages multiple concurrent workstreams and makes priority calls under competing demands.\n\nDelivery-oriented with a track record of driving initiatives to completion through teams: milestones hit, SLAs enforced, projects closed.\n\nStrong presenter who communicates technical security posture, risk, and investment needs to executive audiences clearly and confidently.\n\nSkilled at influencing without authority, driving remediation and compliance outcomes through infrastructure, platform, and application teams.\n\nBuilder mentality: energized by standing up new capabilities while keeping existing operations running smoothly.\n\nAdditional Information\nTravel up to 10% may be required for site assessments, team collaboration, and vendor engagements.\nThe role may require coordination across global teams, including off-hours support for key initiatives, escalations, or major incidents.\nAnnual or Hourly Compensation Range\nThe base salary range for this position is $137,400.00 - $206,200.00. This position is eligible for annual bonus and long-term incentives based on performance, per plan terms. Many factors are taken into consideration when determining compensation, such as experience, education, training, geography, etc. We comply with all minimum wage and overtime laws.Benefits\nEcolab strives to provide comprehensive and market-competitive benefits to meet the needs of our associates and their families. Click here to see our benefits.\nIf you are viewing this posting on a site other than our Ecolab Career website, view our benefits at jobs.ecolab.com/working-here.\nPotential Customer Requirements Notice\nTo meet customer requirements and comply with local or state regulations, applicants for certain customer-facing roles may need to:\n- Undergo additional background screens and/or drug/alcohol testing for customer credentialing.\nAmericans with Disabilities Act (ADA)\nEcolab will provide reasonable accommodation (such as a qualified sign language interpreter or other personal assistance) with our application process upon request as required to comply with applicable laws. If you have a disability and require accommodation assistance in this application process, please visit the Recruiting Support link in the footer of each page of our career website.","description_format":"text","description_chars":9911,"description_truncated":false,"requirements":{"experience_years_min":12,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cleaning & Household Products","Chemical Manufacturing","Food Safety","Sterilization & Infection Control"],"lifecycle":[{"event":"open","at":"2026-09-28T10:49:38Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 20 · green card filings: 6","filings_12m":20,"filings_prev_12m":36,"green_card_filings_12m":6,"median_offered_wage_usd":142885,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":0}],"liveness":{"score":10,"band":"cold","label":"Long shot","p_open":1,"p_active":0.369,"p_room":0.28,"age_days":103,"expected_fill_days":26,"reasons":["conf:4","stale_co","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-28T05:59:10Z"},"pay":{"stated_usd_annual":206200,"is_top_pay":false},"html_url":"https://alion.io/job/ecolab-director-of-security-engineering","json_url":"https://alion.io/job/ecolab-director-of-security-engineering.json","meta":{"generated_at":"2026-10-29T00:40:09Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":908,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1754712},"rest":"https://alion.io/mcp/rest/get_company?id=1754712"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fecolab-director-of-security-engineering"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fecolab-director-of-security-engineering"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fecolab-director-of-security-engineering"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/ecolab-director-of-security-engineering\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fecolab-director-of-security-engineering"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":1387531}},{"tool":"search_jobs","arguments":{"company":"ecolab.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":1387531},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}