Director of Enterprise Security

At Sunrun, we’re on a mission to change the way the world interacts with energy, and we’re building a company and brand that puts power at the center of life. To do it, we’re designing a dynamic culture where employee development, well-being, and safety come first. It’s why we’ve become the #1 home solar and battery company in America. We’re unlike any other residential energy company. Our vertically integrated model gives us total control over every part of the energy lifecycle – from sale through installation and beyond – so you can find endless opportunities for growth. Come join a career you can grow in and a culture you can run with.

Who We Are

We’re on a mission to make energy more reliable and affordable for more people. We provide an opportunity with storage and solar to help people access greater energy independence without the big upfront costs. Sunrun is the largest dedicated residential solar and storage company in the country and has a mission to bring stably priced resilient power to the masses.

This position is primarily remote, with occasional visits to a local office or our corporate headquarters for team-building, training, and collaborative project work. These on-site sessions are designed to strengthen connections, share insights, and ensure a seamless experience for our team and customers. Equipment pick-up from a local branch will be required. We will  provide advance notice whenever on-site attendance is required, making these times purposeful and rewarding.

Who We Are
Sunrun is on a mission to make solar energy affordable for more people. We help people upgrade their home to solar energy without the big upfront costs. Sunrun is dedicated residential solar company in the country and has a mission to bring clean, solar power service to the masses.
This position reports to our Lehi, UT office. May telecommute. Salary offered: $203,632 per year.

Responsibilities:

• Direct and manage enterprise security, cloud security, and application security programs across the organization.
• Develop and implement enterprise-wide cybersecurity strategies designed to protect enterprise systems, customer data, and critical business applications.
• Design, implement, and continuously improve security controls across enterprise infrastructure, cloud environments, and internally developed applications.
• Establish and maintain security policies, standards, and technical guidelines aligned with industry frameworks and regulatory requirements.
• Integrate security controls and best practices into the software development lifecycle (SDLC) to ensure secure development and deployment of applications.
• Oversee the product security function, including vulnerability management, patch management, and secure configuration practices within product engineering environments.
• Partner with product, engineering, and technology teams to identify, assess, and remediate security vulnerabilities in enterprise systems and applications.
• Lead risk assessment activities and ensure remediation of identified security risks across enterprise platforms and services.
• Provide strategic guidance to senior leadership on cybersecurity risks, mitigation strategies, and security program improvements.
• Monitor emerging cybersecurity threats, technologies, and regulatory developments and adapt organizational security practices accordingly.

Qualifications:

• Master’s in Computer or Software Engineering + 3 y. exp. as a CIS Mgr. which must include managing cybersecurity teams and/or security programs; designing and implementing security controls for cloud computing environments; integrating security practices into SDLC; and using Python, C++, IBM Qradar, Imperva Incapsula, IBM BigFix, Nexpose, Symantec PGP, Duo, and Linux.

-OR-

• Bachelor’s in Computer or Software Engineering + 5 y. exp. as a CIS Mgr. which must include managing cybersecurity teams and/or security programs; designing and implementing security controls for cloud computing environments; integrating security practices into SDLC; and using Python, C++, IBM Qradar, Imperva Incapsula, IBM BigFix, Nexpose, Symantec PGP, Duo, and Linux.

Recruiter:

Please note that the compensation information is made in good faith for this position only.  It assumes that the successful candidate will be located in markets within the United States that warrant the compensation.  Please speak with your recruiter to learn more.

Starting salary/wage for this opportunity:

Compensation decisions will not be based on a candidate's salary history. You can learn more here.

This job description outlines the primary responsibilities, some essential job functions, and qualifications for the role. It may not include all essential functions, tasks, or requirements. If you are a qualified individual with a disability and you need reasonable accommodation during the hiring process or to perform this role, please contact us at candidateaccommodations@sunrun.com.

Sunrun is proud to be an equal opportunity employer that does not tolerate discrimination or harassment of any kind.  We believe that empowering people and valuing their differences are essential for our mission of connecting people to the cleanest energy on earth. Learn more here: EEO | Sunrun