Lead Security Engineer at NVR, Inc in Reston, VA

Job description

NVR, Inc. is seeking a Lead Security Engineer to work on site in Reston, VA. NVR’s technology teams thrive on providing multiple business lines with the tools and technologies that support NVR’s mission to create a better living experience for our customers. Join NVR Technology and be part of a collaborative team that welcomes innovation, encourages continuous learning, and helps you achieve your career goals. Summary We are seeking a Lead Security Engineer to provide hands-on technical leadership for enterprise security engineering. In this lead individual-contributor role, you will set technical direction, own complex security designs and standards, guide implementation across security platforms and services, and serve as a trusted security partner for major technology initiatives. You will lead through influence, mentor engineers, and help ensure that security controls are practical, consistently implemented, and operating effectively. What You’ll Do Lead the architecture, design, implementation, and continuous improvement of enterprise security platforms and services. Establish technical standards, security baselines, reference designs, configuration requirements, and engineering runbooks across assigned security domains. Serve as the security engineering lead for complex projects, translating business and technical requirements into secure, supportable solutions. Provide technical ownership for capabilities such as endpoint protection, vulnerability management, privileged access management, cloud and Microsoft 365 security, log management, encryption, secure email, and network security. Lead technical risk assessments, design reviews, threat modeling, control validation, and security testing for new and changing solutions. Ensure security tools are maintained, integrated, monitored, and configured in accordance with documented standards, current releases, and approved security baselines. Provide senior-level support for complex incidents, including technical analysis, containment strategy, remediation leadership, root-cause review, and post-incident improvements. Lead vulnerability-management engineering and remediation coordination, including prioritization, exception analysis, trend review, and verification of corrective actions. Partner with infrastructure, applications, cloud, architecture, audit, and business teams to embed security throughout the system development lifecycle. Evaluate emerging threats, technologies, and products; develop recommendations and present options, risks, and tradeoffs to technology leadership. Lead medium-to-large security initiatives and coordinate work across technical teams, vendors, and stakeholders. Mentor security engineers, provide technical review and coaching, and promote shared engineering practices across the team. Develop meaningful measures for security control health, operational effectiveness, risk reduction, and continuous improvement. Job Qualifications 8+ years of progressive experience designing, implementing, administering, and improving enterprise information security solutions, including significant responsibility for complex technical initiatives. Demonstrated ability to lead security architecture and engineering decisions across multiple enterprise platforms or security domains. Deep expertise in several areas such as endpoint security, vulnerability management, privileged access management, cloud security, Microsoft 365 security, SIEM/logging, encryption, email security, network security, or threat management. Experience leading incident response, technical investigations, root-cause analysis, and enterprise remediation efforts. Strong knowledge of security architecture principles, control frameworks, policies, standards, baselines, audit requirements, and risk-management practices. Ability to translate risk into practical technical requirements and balance security, business, operational, and user needs. Proven experience leading cross-functional technical project