Senior Security Engineer

Overview

• Lead the design, implementation, and improvement of enterprise security controls across diverse domains.
• Collaborate with cross-functional teams to enhance security posture and meet regulatory requirements.
• Provide technical leadership in identity management, cloud security, and incident response.
• Support strategic security initiatives within a fast-paced financial services environment.
• Evaluate emerging cybersecurity threats and recommend improvements to strengthen operational effectiveness.
• Develop and maintain security procedures, standards, and governance materials.
• Contribute to regulatory, audit, and compliance initiatives, ensuring adherence to industry standards.
• Participate in hybrid work arrangements, balancing remote and onsite support.

Key Responsibilities & Duties

• Design and implement security technologies across cloud, network, endpoint, and identity domains.
• Lead vulnerability management activities, including risk prioritization and remediation planning.
• Manage security tools such as SIEM, DLP, endpoint protection, and email security solutions.
• Conduct technical risk assessments and recommend mitigation strategies.
• Support incident response, detection engineering, and automation workflows.
• Collaborate with IT and business teams to integrate security requirements into processes.
• Evaluate and implement emerging cybersecurity technologies and best practices.
• Develop and approve security-related changes to enterprise systems and configurations.

Job Requirements

• Bachelor’s degree in Cybersecurity, IT, Computer Science, or related field.
• Minimum of 7 years of cybersecurity experience, with preference for 10 years.
• Experience with security frameworks such as ISO 27001, NIST CSF, and CIS Controls.
• Proficiency in security tools, including SIEM, EDR, DLP, and vulnerability scanners.
• Strong knowledge of cloud security, preferably Microsoft Azure and Microsoft 365.
• Understanding of networking protocols and technologies, including firewalls and VPNs.
• Industry certifications such as CISSP, CCSP, or CISM are preferred.
• Excellent communication skills for technical and non-technical audiences.