Server Security Engineer Jobs (NOW HIRING)

Job Summary:
McKinstry is innovating the waste and climate harm out of the built environment and creating lasting impact. They are seeking a Senior Manager, Security Engineering to lead the design and governance of security engineering capabilities across various domains including application and AI security.
Responsibilities:
• Own McKinstry’s security engineering program — leading the design, implementation, and continuous improvement of security and security AI capabilities, controls, and automation across the organization.
• Lead the application security program, embedding secure-by-design principles across the SDLC and partnering with development and product teams to shift security left.
• Set and enforce McKinstry’s security architecture standards, conducting threat modeling and providing security sign-off on new systems, platforms, and cloud deployments.
• Govern network security posture across on-premises, Azure, and hybrid environments, partnering with IT Infrastructure and Cloud Engineering on segmentation, firewall policy, and SASE.
• Manage and develop the AI Security Engineer, directing AI/ML security assessments, MCP server security reviews, and AI agent risk evaluations across the organization.
• Sit on McKinstry’s Security, Legal, and Governance committees for AI Security and deliver regular security engineering updates to the C-suite.
• Partner with the CISO to shape McKinstry’s security engineering strategy, ensuring the engineering program is aligned to organizational risk priorities and business objectives.
• Sit on McKinstry’s Security, Legal, and Governance committees for AI Security — representing the security engineering perspective and ensuring AI risk is appropriately governed.
• Deliver regular security engineering updates to the C-suite, translating technical program status, risk posture, and investment needs into clear business language.
• Represent the security engineering function in cross-functional leadership forums, architecture review boards, and executive-level discussions.
• Contribute to board-level security reporting, including updates on engineering program health, vulnerability trends, architecture maturity, and AI security posture.
• Translate McKinstry’s business and product growth objectives into security engineering requirements.
• Lead the design, implementation, and continuous improvement of the organization’s security engineering capabilities, controls, and automation.
• Own the security engineering roadmap, translating strategic risk priorities into actionable technical initiatives.
• Drive integration of security tooling, APIs, and automation pipelines across the security stack (SIEM, EDR, SOAR, vulnerability management).
• Establish and maintain engineering standards, peer review processes, and quality gates for security solutions.
• Lead the application security program, embedding secure-by-design principles across the software development lifecycle (SDLC).
• Define and enforce secure coding standards, SAST/DAST tooling, dependency scanning, and code review requirements.
• Conduct and oversee application security assessments, penetration testing coordination, and remediation tracking.
• Partner with development and product teams to deliver security training and shift-left security practices.
• Develop and maintain the organization’s security reference architecture, aligned to Zero Trust, defense-in-depth, and least-privilege principles.
• Review and provide security sign-off on architecture designs for new systems, platforms, integrations, and cloud deployments.
• Lead threat modeling exercises for high-risk systems, new product features, and major infrastructure changes.
• Ensure security architecture decisions are documented, communicated, and embedded into engineering standards.
• Oversee the security posture of network infrastructure, including segmentation, perimeter controls, and secure remote access.
• Ensure network security standards are applied consistently across on-premises, cloud (Azure), and hybrid environments.
• Partner with IT Infrastructure and Cloud Engineering on firewall policy, VPN, SASE, and micro-segmentation initiatives.
• Review and approve network architecture changes with a security lens, maintaining current network security documentation.
• Manage and develop Security Engineers, providing technical direction and leadership direction, including hiring coaching, performance management and career development.
• Maintain working knowledge of the OWASP AI Security Top 10 and apply it to the organization’s AI system risk reviews.
• Provide security oversight for Model Context Protocol (MCP) server deployments, including access controls, data exposure risks, and integration security.
• Ensure AI agent architectures are reviewed for security risks including prompt injection, data leakage, and unintended autonomous actions.
• Incorporate AI security alerting and monitoring requirements into the broader security operations and detection strategy.
• Stay current with emerging AI Security technologies and vulnerabilities.
Qualifications:
Required:
• 10+ years of experience in cybersecurity, with 7+ years in security engineering, application security, or security architecture roles
• 7+ years in a people management or technical lead capacity within a security engineering or product security function
• Demonstrated experience delivering security engineering programs across multiple domains (application, network, cloud)
• Familiarity of AI agent security risks including prompt injection, unintended autonomy, and data exposure in agentic workflows
• Strong hands-on background in application security — SDLC integration, SAST/DAST tooling, secure code review, and penetration testing coordination
• Proficiency in security architecture design and documentation, including Zero Trust, defense-in-depth, and least-privilege frameworks
• Working knowledge of network security controls, segmentation, firewall policy, VPN, and SASE architectures
• Experience with cloud security engineering in hybrid environments — Azure expertise strongly preferred
• Familiarity with scripting and automation relevant to security engineering (Python, PowerShell, Bash, or equivalent)
• Working knowledge of the OWASP AI Security Top 10 and AI/ML system risk assessment approaches
• Familiarity with Model Context Protocol (MCP) server architecture and associated security considerations
• Working knowledge of NIST CSF, ISO 27001, SOC 2, and applicable regulatory and compliance requirements
• Experience with threat modeling methodologies (STRIDE, PASTA, or equivalent) applied to complex system designs
• Proven ability to manage, mentor, and grow technical security engineering talent
• Strong communication skills — able to translate engineering risk into business impact for executive and non-technical audiences
• Collaborative mindset with experience partnering across development, infrastructure, and product teams
• Some travel required to job sites, vendor meetings, or industry conferences
Preferred:
• CISSP or CISM — required or in progress
• CSSLP, GWEB, or equivalent application security certification a strong plus
• Cloud security certifications (e.g., AZ-500, CCSP) valued
Company:
McKinstry is an engineering company specializing in designing, constructing, operating, and maintaining high-performing buildings. Founded in 1960, the company is headquartered in Seattle, USA, with a team of 1001-5000 employees. The company is currently Late Stage.