Infrastructure Cyber Defense Leader

Job Details: Job Description:
About the Role

Altera is seeking a technically capable Infrastructure Cyber Defense Leader to lead enterprise infrastructure security strategy, operations, and continuous improvement across network, cloud, on-premises, and hybrid technology environments. The role will oversee network security, cloud security, infrastructure protection, vulnerability management, security architecture, cyber resilience, and risk assessment activities. The successful candidate will help protect semiconductor design environments, operations, intellectual property, corporate systems, engineering platforms, and critical business services.

This position will work closely with Information Security, Infrastructure, Cloud, Network Engineering, IT Engineering, IT Operations, Compliance, Legal, Internal Audit, and business stakeholders. It is best suited for a hands-on security leader who can translate enterprise risk into practical security controls, measurable outcomes, and resilient technology architectures. What You’ll Do

Infrastructure Defense Strategy and Operations

Lead the strategy, operating model, and day-to-day execution of infrastructure defense capabilities across enterprise, cloud, data center, remote access, and engineering environments.
Establish security standards, operating procedures, control objectives, service-level expectations, and performance metrics for infrastructure security.
Assess infrastructure risks and prioritize remediation based on business criticality, exploitability, exposure, and potential impact to production, engineering, intellectual property, and customer commitments.
Develop and maintain infrastructure security roadmaps aligned to business priorities, technology strategy, threat intelligence, and applicable security frameworks.
Monitor operational performance, control effectiveness, open risks, exceptions, remediation commitments, and unresolved security gaps.
Identify opportunities to improve automation, visibility, control consistency, operational efficiency, and cyber resilience.

Network Security

Oversee enterprise network security capabilities, including firewalls, secure web gateways, intrusion prevention, network segmentation, remote access, DNS security, DDoS protection, and network monitoring.
Partner with Network Engineering to design and implement secure connectivity across corporate, cloud, data center, engineering and third-party environments.
Improve segmentation and access controls for sensitive semiconductor design assets, production systems, engineering networks, and high-value intellectual property.
Review network security configurations, rule sets, architecture changes, and exceptions to ensure alignment with approved standards.
Establish measurable improvements in network visibility, control coverage, policy hygiene, and response readiness.
Support investigation and remediation of network-based threats, misconfigurations, unauthorized access, and control failures.

Cloud Security — Azure and AWS

Lead security architecture, governance, and operational control implementation across Microsoft Azure, Amazon Web Services, and hybrid cloud environments.
Define and enforce cloud security standards for identity, access management, network controls, encryption, logging, monitoring, secrets management, workload protection, and data security.
Oversee security posture management and remediation activities across Azure and AWS accounts, subscriptions, landing zones, and cloud workloads.
Partner with Cloud Engineering and DevOps teams to integrate security into infrastructure-as-code, CI/CD pipelines, container platforms, serverless services, and platform engineering practices.
Improve cloud detection, logging, configuration compliance, vulnerability visibility, and incident response readiness.
Review cloud architecture designs and technology changes for security risks, control gaps, resilience implications, and regulatory requirements.
Support cloud migration and modernization initiatives by embedding secure-by-design principles into solution delivery.

Application Security and DevSecOps

Lead and mature application security and DevSecOps capabilities across internally developed applications, APIs, cloud-native services, and engineering platforms.
Establish secure SDLC requirements, application security standards, security review processes, and security control expectations.
Partner with Software Engineering, DevOps, Platform Engineering, and Cloud teams to integrate security into development, testing, CI/CD pipelines, infrastructure-as-code, containers, Kubernetes platforms, and software delivery processes.
Oversee application security testing capabilities including SAST, DAST, SCA, secrets detection, API security testing, container security scanning, and infrastructure-as-code security assessments.
Facilitate threat modeling, secure design reviews, secure coding initiatives, and risk assessments for new applications and major technology changes.
Establish risk-based remediation processes and performance metrics for application security findings and software supply-chain risks.
Coordinate application penetration testing, remediation validation, and secure release readiness activities.
Improve software supply-chain security through dependency governance, SBOM visibility, artifact integrity controls, and code-signing practices.

Infrastructure Security and Cyber Resilience

Protect compute, storage, virtualization, operating systems, databases, endpoints, identity infrastructure, backup platforms, and other foundational technology services.
Assess technology dependencies and identify breaking points that could affect the recoverability and availability of critical business.
Drive initiatives that strengthen infrastructure resilience against ransomware, destructive attacks, identity compromise, cloud disruption, and technology failures.
Partner with IT Operations and Disaster Recovery teams to validate backup protection, recovery controls, restoration procedures, and resilience assumptions.
Support infrastructure hardening, secure configuration management, privileged access controls, endpoint protection, and administrative activity monitoring.
Lead infrastructure security reviews for new platforms, major changes, acquisitions, third-party services, and high-risk technology implementations.

Vulnerability Management

Lead the enterprise vulnerability management program across network devices, servers, endpoints, cloud resources, applications, containers, engineering systems, and assets.
Establish risk-based prioritization, remediation service levels, exception processes, escalation paths, and executive reporting.
Improve asset inventory accuracy, scanning coverage, authenticated scanning, cloud visibility, vulnerability validation, and remediation tracking.
Partner with Infrastructure, Cloud, Application, Engineering, and IT teams to reduce exposure to critical and actively exploited vulnerabilities.
Track remediation performance using measurable indicators such as critical vulnerability aging, remediation timeliness, exposure reduction, asset coverage, and exception closure.
Coordinate vulnerability assessments, penetration testing, configuration reviews, attack-surface assessments, and remediation validation.
Provide risk-based reporting to security leadership, technology owners, audit teams, and executive stakeholders.

Security Architecture and Risk Assessments

Lead security architecture reviews for infrastructure, cloud, network, identity, data center, and technology transformation initiatives.
Translate business and technical requirements into secure, scalable, and resilient architecture patterns.
Conduct risk assessments that identify control gaps, attack paths, dependencies, concentration risks, and potential business impacts.
Review proposed designs, technology changes, exceptions, and compensating controls against enterprise securit