Key Responsibilities
- Lead and mentor a team of security engineers, fostering a security-first culture.
- Execute the cybersecurity strategy for cloud-native SaaS and corporate environments.
- Implement security controls for AWS infrastructure and Microsoft 365 ecosystem
- Manage identity and access security through Entra ID (Azure AD), enforcing MFA, conditional access, and privileged identity management.
- Develop automated incident response workflows leveraging SOAR tools and integrate threat intelligence feeds.
- Embed security champions within engineering teams to promote secure coding and CI/CD pipeline security.
- Act as product owner for security initiatives, creating user stories, prioritizing work, and guiding delivery.
- Manage vendor relationships for penetration testing, audits, and specialized security services.
- Define and report on security KPIs such as MTTR, vulnerability remediation SLAs, and cloud/corporate misconfiguration trends.
- Drive process improvements for incident response, training, and runbook development.
Required Skills & Experience
- 8+ years in cybersecurity with 4+ years in a leadership role.
- Deep expertise in cloud security (AWS required; Azure/GCP preferred) for Enterprise SaaS application.
- Experience securing Microsoft 365 services and managing Entra ID (Azure AD) for identity and access control.
- Proficiency in AWS services (VPC, IAM, EC2, RDS, S3, EKS/ECS) and security tooling (CSPM, SIEM, EDR).
- Strong knowledge of application security (SAST, DAST, SBOMs) and API security.
- Hands-on experience with incident response automation and threat intelligence.
- Ability to script and automate security solutions (Python, Bash, Jenkins, Terraform).
- Strong technical experience with Linux, Network Security, and Web Application Firewalls (Cloudflare, AWS WAF).
- CrowdStrike EDR, SIEM, CSPM experience desired
- Experience with IaC security tools (Terraform scanning, policy-as-code) is a plus
- Experience Privileged Access Management (PAM) and Just-In-Time access are a plus
- Relevant certifications (CISSP, CCSP, CISM, AWS Security Specialty, Microsoft Security certifications) are a plus.
- Strong communication, problem-solving, and collaboration skills.
Top Skills
What We Do
Onit is a global leader of enterprise software and artificial intelligence platforms and products for legal, compliance, sales, IT, HR and finance departments. Our software transforms best practices into smarter workflows, better processes and operational efficiencies. With a focus on enterprise legal management, matter management, legal spend management, contract lifecycle management and legal holds, we operate worldwide and help global companies and billion-dollar legal departments bridge the gap between systems of record and systems of engagement.
Onit is the only company in our space with two platforms: Our leading no-code business process automation platform, Apptitude, and our business intelligence platform, Precedent. Apptitude allows customers to create, modify and deploy new software products and custom workflows. Onit’s legal AI platform, Precedent, enables our software products to read, write, and reason like a lawyer. Combined, the two platforms enable customers to digitally transform legal operations by automating processes, reducing costs and maximizing productivity with industry-leading cloud-based software.








