Cyber Security Subject Matter Expert

You will serve as the technical leader driving cybersecurity testing and product security across North America, helping build and scale a leader in the TIC industry's cyber offerings across connected products, systems, and software. You will bring deep technical cybersecurity expertise, help define and scale service offerings, bridge the gap between product testing, engineering, and cybersecurity assurance, and act as the technical authority in front of clients and internal teams.

Cybersecurity Testing & Assessment
Perform penetration testing (network, application, physical/social engineering)
Identify vulnerabilities across systems, software, and connected products
Conduct security audits, risk assessments, and threat modeling
Security Architecture & Engineering
Define and enforce security requirements for systems and products
Evaluate and improve software and system architecture security
Validate compliance against industry standards and frameworks
Cross-Functional Engineering Support
Partner with software, hardware, and systems teams
Embed security into the development lifecycle
Educate teams on vulnerabilities, attack vectors, and remediation
Incident Response & Risk Management
Support incident response efforts
Assess and mitigate system and network risks
Strengthen overall security posture across environments
SME Leadership & Practice Growth (Critical)
Act as the Subject Matter Expert for cybersecurity in NA
Help build and scale cybersecurity testing services
Engage with clients, program leaders, and internal stakeholders
Support business growth with technical credibility This position is ideal for a hands-on cybersecurity expert who can both execute technically and help define, grow, and lead a new service line. The role sits at the intersection of product testing, cybersecurity engineering, and client advisory.

Key Responsibilities
Cybersecurity Service Development & Growth

Lead the development and expansion of cybersecurity testing services across North America
Define service offerings, methodologies, and frameworks for product and system security testing
Partner with internal teams to integrate cybersecurity into existing lab testing capabilities
Support business development efforts by serving as a subject matter expert in client engagements

Offensive Security & Testing

Conduct penetration testing across a range of systems including embedded devices, IoT, and industrial systems
Perform vulnerability assessments, physical security testing, and social engineering exercises
Evaluate the resilience of products and systems against real-world attack scenarios

Security Architecture & Risk Assessment

Assess system and product architectures for security risks and design vulnerabilities
Provide recommendations to improve security posture across hardware and software ecosystems
Support compliance and regulatory requirements related to cybersecurity validation

Engineering & Product Collaboration

Work closely with software, hardware, and product engineering teams to embed security into design and development processes
Review system designs and provide guidance on secure architecture and implementation
Advocate for proactive security practices rather than reactive fixes

Incident Response & Advisory

Support incident response efforts and guide clients through security events when needed
Translate technical findings into business risk and actionable recommendations
Serve as a trusted advisor to both internal stakeholders and external customers

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com.To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

10–15+ years in hands-on cybersecurity
Deep experience in penetration testing (network, application, physical; social engineering preferred), vulnerability assessment, auditing/risk assessments, and incident response across systems, software, and connected products
Strong system, application, and product security expertise
Able to evaluate software, systems, configurations, and architecture for risk
Experience translating findings into practical fixes and security requirements, not just reports
Engineering-facing operator (not isolated security)
Proven experience working closely with engineering, product, or systems teams embedding security into development, not just testing after the fact
End-to-end security program exposure
Experience across testing, auditing, risk analysis, incident response, and security controls
Has operated within or contributed to structured security programs, not just one function
Comfortable acting as an SME across teams and stakeholders

One or more certifications GWAPT, GPEN, CEH, CISM, GWEB, CISSP (Strongly Preferred)
Experience in highly regulated/high-security environments such as Defense/DoD, Financial Services, or similar
Familiarity with NSA / COMSEC requirements
Experience applying system security engineering processes across programs

Benefit packages for this role will start on the 1st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.