Director, Security Engineering & Architecture

• Lead an assigned cybersecurity function, setting its vision, structure, and culture and leading multiple teams through managers and senior technical leads.
• Own the function's roadmap, aligned with ESO strategy, enterprise architecture standards, the Lennar Technology Group roadmap, and the company's risk priorities.
• Drive the adoption of AI and automation within the function to reduce manual toil, increase delivery speed, and improve security outcomes.
• Own delivery execution, including prioritization, resourcing, budget management, and vendor, contractor, and managed service oversight.
• Define and report metrics that drive accountability and communicate security posture and progress to senior leadership.
• Partner with ESO peers and with business and technology leaders to translate business needs into secure, scalable solutions, influencing decisions at the senior leadership level.
• Recruit, mentor, and grow managers and individual contributors, building a strong bench of talent and an inclusive culture across a geographically distributed organization.

• Proven experience building and leading multiple high-performing security teams.
• Strong background across information security domains and familiarity with security frameworks and regulations (e.g., NIST CSF).
• Practical experience applying AI/ML and generative AI to real security problems.
• Experience managing budgets, vendor relationships, and contractor or managed service resources.
• Proven ability to influence senior stakeholders and communicate complex security topics to executive, business, and technical audiences.
• Bachelor's or Master's degree in Computer Science, Engineering, Information Systems, or a related discipline; equivalent experience considered in lieu of degree. At least 5 years of experience across security or technology disciplines, with at least 3 years in technology leadership, including experience overseeing multiple teams. Relevant certifications such as CISSP or CISM preferred.

• Own the multi-year security engineering roadmap and partner with enterprise architecture and domain architects to shape Lennar's security architecture.

• Own the multi-year security engineering roadmap and partner with enterprise architecture and domain architects to shape Lennar's security architecture.
• Apply AI and automation (e.g., agentic workflows, LLM-powered tooling, AI-assisted code review, intelligent process automation) across security engineering to optimize threat detection, vulnerability management, security testing, and incident response workflows.
• Partner with AI Engineering, enterprise architecture, data, and platform teams as a key stakeholder in Lennar's enterprise AI adoption, contributing security requirements, guardrails, and reference patterns that address risks such as sensitive data exposure, prompt injection, model and supply chain integrity, and identity and access for AI agents.
• Partner with DevOps, platform, and application engineering leaders to embed security into CI/CD pipelines and the software development lifecycle, advocating for shift-left practices, automated security gates, and secure-by-default reference architectures.
• Establish and govern security engineering standards, reference architectures, reusable patterns, and internal tooling, and partner with enterprise architecture on the review of new and changing solutions.
• Lead enterprise vulnerability management and security review programs, using data-driven, risk-based prioritization to focus engineering effort on the highest-risk exposures.
• Collaborate with Security Operations, Identity & Access Management, and Governance, Risk & Compliance to translate security strategy and standards into engineered controls and measurable outcomes.
• Evaluate, select, and operationalize security technologies and vendors, with a particular focus on AI-native and automation-first solutions, and drive platform rationalization to improve effectiveness and total cost of ownership.
• Track engineering health and security posture metrics such as deployment frequency, mean time to remediate, automation coverage, control coverage, and security debt.

• Demonstrated experience defining and implementing enterprise security architecture across AWS, Azure, or GCP, spanning IaaS, PaaS, and SaaS models in hybrid and multi-cloud environments.
• Hands-on experience with modern software architecture, microservices/API-based development, infrastructure-as-code, scripting, and security tooling development, with the technical depth to guide engineering decisions.
• Deep experience embedding security into DevSecOps practices, CI/CD pipelines, and Agile/Scrum delivery models.
• Strong background in application security, infrastructure and cloud security, zero trust, data protection, and vulnerability management.
• Working knowledge of securing AI systems and familiarity with relevant frameworks such as the OWASP Top 10 for LLM Applications, NIST AI Risk Management Framework, or MITRE ATLAS.
• Engineering and architecture certifications such as CCSP, CCSK, SABSA, TOGAF, or cloud vendor-specific security credentials are preferred.
• undefined Physical & Office/Site Presence Requirements: This is primarily a sedentary office position which requires the incumbent to have the ability to operate computer equipment, speak, hear, bend, stoop, reach, lift, and move and carry up to 25 lbs. Finger dexterity is necessary. This description outlines the basic responsibilities and requirements for the position noted. This is not a comprehensive listing of all job duties of the Associates. Duties, responsibilities and activities may change at any time with or without notice. Lennar is an equal opportunity employer and complies with all applicable federal, state, and local fair employment practices laws.