Principal/Sr. Staff Security Engineer

Position: Principal/Sr. Staff Security Engineer

Job Level: Senior

Location: Orem, UT, Austin, TX or Remote

Reports to: VP, Information Technology

Division: Corporate

FLSA Status: Exempt

Department: Systems

Shift: Full-time (40 hours)

Salary: DOE

Complete Solar: Complete Solar is a residential solar company dedicated to making clean, renewable energy accessible and affordable for everyone. As climate change continues to impact our world, we focus on creating a brighter, more sustainable future for both people and the planet. We sell directly to consumers and provide a seamless experience from sales and installation to financing and ongoing support. At Complete Solar, we are a value-driven organization that strives to develop a high-trust culture, operate efficiently, and continuously improve. If that sounds like something you want to be a part of, apply today! Join us in revolutionizing the solar industry and building a greener tomorrow.

Position Summary:

Complete Solar is looking for a Principal/Sr. Staff Security Engineer. This senior-level position involves overseeing security strategies and initiatives across our organization. This role requires extensive experience and expertise in cybersecurity, as well as the ability to engage teams and influence organizational security policies. You will be responsible for setting and leading our security strategy, defining Complete Solar’s security architecture, and conducting security assessments of our most important and complex systems.

A significant responsibility of this role is mentoring and growing the security capabilities of security- and non-security staff alike. As a result, a strong candidate should be a product-minded and customer-oriented security professional who can communicate with technical teams and executives. A passion for renewable energy is a plus (if not, we’ll inspire you).

Security leaders will have a demonstrated ability to make a significant security impact through strong communications, prioritization, and partnership with internal and external teams. We nurture a strong security culture and focus on scaling our security program as we grow rapidly. This position reports to the Vice President of Information Technology.

Essential Duties & Responsibilities:

• Leading the development and implementation of comprehensive security strategies and policies, aligning them with business goals and compliance requirements. This is a new role, so you will have important responsibility (and opportunity) to build a fresh, new strategy that meets Complete Solar’s needs as we evolve.
• Performing in-depth risk assessments, identifying critical vulnerabilities, and prioritizing security controls to mitigate risks effectively.
• Monitoring emerging threats, analyzing potential attack vectors, and developing incident response plans to minimize damage from security breaches.
• Evaluating and selecting security tools and technologies, deploying them across the organization, and managing their ongoing operation.
• Evaluating and managing security aspects of third-party vendors and service providers.
• Collaborating to develop and deliver security awareness programs for employees.
• Strong understanding of security frameworks like NIST, ISO 27001, and industry-specific compliance regulations.
• Communicate risk and risk mitigation plans to the leadership team.
• Strong leadership and project management skills.
• Strategic thinking and the ability to influence organizational change.

Required Qualifications:

• MS in computer science, information security, information science, a related field, or equivalent work experience.
• 6 or more years experience in various security domains, including network security, application security, identity and access management, data protection, and threat intelligence.
• 2 or more years of experience communicating with both technical and non-technical audiences, verbally and in writing.
• Desired: Relevant certifications such as CompTIA Security+, Certified Ethical Hacker (CEH), or Cisco Certified CyberOps Associate or advanced certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), or Certified Information Systems Auditor (CISA).