NBA
Senior Cyber Security Engineer
Remote Cybersecurity Engineering role with clear candidate location fit.
PostedJul 14, 2026
Eligible countries1 accepted country
Seniority signalSenior
Work settingRemote
Accepted candidate locations
USA
Role overview
Senior Cyber Security Engineer
Requirements and responsibilities
Readable role content extracted into sections for faster review.
Major Responsibilities
- Manage the enterprise vulnerability management program across cloud and on-premises environments, leveraging risk-based decision making to prioritize remediation efforts, coordinate stakeholders, and reduce organizational exposure.
- Design, implement, and operate AI security strategies and governance processes to ensure secure adoption of emerging AI technologies, identifying, assessing, and mitigating associated risks in alignment with organizational goals.
- Oversee the Cyber Threat Intelligence program, leveraging intelligence collection and analysis to identify and prioritize emerging risks, deliver actionable intelligence, and communicate threat assessments to technical, business, and executive stakeholders.
- Collect and aggregate intelligence from OSINT, Deep/Dark Web resources, and other intelligence sources to monitor exploitable and high-profile threats impacting the NBA League Office and NBA teams.
- Research emerging threat actor tactics, techniques, and procedures (TTPs) to assess risk and validate security controls.
- Perform continuous monitoring and exposure management activities across cloud, on-premises, and external-facing environments to identify emerging security risks, obsolete systems, and configuration weaknesses.
- Manage the League's Team Audit and Risk Assessment Program across all NBA teams, overseeing assessments, control evaluations, remediation tracking, and reporting to strengthen security governance and ensure compliance with League security requirements.
- Collaborate closely with cross-functional business units and NBA teams to drive security initiatives, coordinate remediation of identified vulnerabilities, and reduce the NBA's overall risk profile.
- Communicate findings, risk posture, and program metrics & key performance indicators (KPIs) to technical operators, business stakeholders, NBA teams, and senior leadership to support informed decision-making and continuous improvement.
Required Education & Professional Experience
- Bachelor's degree in CyberSecurity, Computer Science, or a related field. Advanced degrees or relevant certifications such as Certified Information Systems Security Professional (CISSP), Certified Information Systems Auditor (CISA), GIAC Public Cloud Security (GPCS), GIAC Cyber Threat Intelligence (GCTI), GIAC Enterprise Vulnerability Assessor (GEVA), OffSec Web Assessor (OSWA), CompTIA Security+ or equivalent certification are strongly preferred.
- Minimum 5 years of hands-on CyberSecurity experience across vulnerability management, cloud security, threat intelligence, audit & risk management, AI security, or related cybersecurity disciplines.
- Experience communicating CyberSecurity risk, strategy, and program effectiveness to technical teams, business stakeholders, and executive leadership.
Required Education & Professional Experience
- Advanced understanding of cloud security concepts and technologies (AWS & Azure services), as well as typical corporate security controls (e.g., NIDS/NIPS, HIDS/HIPS, WAF, Network Firewalls, VPN, SIEM, DLP, etc.).
- Deep technical expertise and hands-on proficiency with industry-standard platforms across AI security, vulnerability management, cloud security, attack surface management, threat intelligence, and security risk management.
- Strong understanding of the current threat landscape, including advanced persistent threats (APTs), threat actor tactics, techniques, and procedures (TTPs), malware trends, and emerging cybersecurity risks.
- Demonstrated ability to operate as a program owner, driving multi-stakeholder remediation across business units and partner organizations through influence, collaboration, and risk communication.
- Strong analytical and problem-solving skills, with the ability to convert raw security data into prioritized, risk-based recommendations.
- Ability to document and communicate technical concepts, risks, and recommendations in a clear and concise manner.
Similar roles
Keep a backup shortlist.
Stack
Use these tags to compare similar remote roles.
Location eligibility
Candidates should apply only when their profile country is listed here.
Your profileCountry not setSign in to check your country against this role.
Hiring flow
WithMira shows the role, then sends candidates to the company application.
1Check role fit, stack, and location eligibility in WithMira.
2Open the company application page from the tracked apply link.
3Save the role or subscribe for similar opportunities before leaving.