Senior Cyber Security Engineer

Job Title: Senior Cyber Security Engineer
Location: Washington, DC
Status: Full-time; Exempt
Typical Work Hours: 8:30 a.m. to 5:00 p.m. Monday to Friday


Monex is a leading global financial solutions provider, offering a complete set of tools to support business growth and strategic financial operations.

We specialize in FX risk management and international payments, helping corporate and institutional clients design tailored FX solutions to navigate currency volatility with confidence. Our team of FX specialists implement well-considered currency strategies, offering dedicated support to help clients manage their payment needs – whether for goods, services, or direct investments.

In 2023, Monex facilitated $309 billion in FX turnover, managed $10.7 billion in assets, and processed 8.5 million transactions. With offices across North America (Canada, the US, and Mexico), Asia (Singapore), and Europe (the UK, Spain, and the Netherlands), we serve over 66,000 clients worldwide.

By combining global reach with deep local market expertise, Monex enhances businesses with a suite of financial solutions and FX market analysis to help optimize efficiency, mitigate currency risk, and protect margins in an increasingly complex financial landscape.

Job Overview
As a Senior Cyber Security Engineer, you will be responsible for securing the organization’s cloud and hybrid infrastructure across Azure, Microsoft 365, and on-premises environments. You will serve as the technical authority for cloud security, working closely with the SOC, Infrastructure, and IT Operations teams.
The role will have a global footprint and requires collaborative working with offices across the globe including Europe and the USA.

Responsibilities

• Design, implement, and maintain secure cloud, endpoint, and identity management solutions across Microsoft Azure, Microsoft 365, Intune, and Entra ID environments.
• Manage and optimize the Microsoft security stack, including Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender XDR, and Microsoft Sentinel.
• Deploy, secure, and manage Windows, iOS, and Android devices through Microsoft Intune, including compliance policies, security baselines, encryption, application protection, and device lifecycle management.
• Support the rollout, adoption, and ongoing management of Windows Hello for Business, Conditional Access, Multi-Factor Authentication, and Zero Trust security controls.
• Implement and maintain Azure security governance, including Azure Policy, RBAC, Privileged Identity Management (PIM), Identity Governance, and compliance frameworks.
• Manage cloud and network security controls, including Azure Firewall, NSGs, Private Endpoints, VPN connectivity, segmentation, and secure access solutions.
• Monitor and improve security posture through Secure Score, vulnerability management, compliance reporting, and continuous control optimization.
• Collaborate with Security Operations teams to investigate incidents, tune detections, respond to alerts, and improve overall threat visibility.
• Automate security, compliance, and deployment processes using PowerShell, Python, Infrastructure as Code (Terraform/Bicep), and CI/CD pipelines.
• Support internal and external audits, risk assessments, remediation efforts, and regulatory compliance requirements within a regulated environment.

Required Professional Qualifications

• 7-12 years of experience in Endpoint Engineering, Infrastructure Security, Cloud Security, or a related engineering role.
• Hands-on experience with Microsoft Intune, Microsoft 365, Azure, and Microsoft Entra ID.
• Strong experience with Microsoft Defender technologies, Microsoft Sentinel, Endpoint Detection & Response (EDR/XDR), Data Loss Prevention (DLP), and enterprise endpoint security.
• Experience implementing Conditional Access, Zero Trust principles, Windows Hello for Business, BitLocker, compliance policies, and identity security controls.
• Knowledge of Azure security services, Azure Policy, RBAC, PIM, networking security, and cloud governance best practices.
• Experience with Infrastructure as Code (Terraform and/or Bicep), PowerShell and/or Python automation, and DevSecOps methodologies.
• Strong understanding of Windows 11 security, endpoint hardening, vulnerability management, patching, networking concepts, and enterprise mobility management.
• Experience supporting security and compliance initiatives within regulated environments.
• Excellent communication skills with the ability to work effectively across infrastructure, security, compliance, and business teams.

Preferred Qualifications

• Microsoft Certified: Azure Security Engineer Associate (AZ-500)
• Microsoft Certified: Security Operations Analyst (SC-200)
• Microsoft Certified: Cybersecurity Architect Expert (SC-100)
• Microsoft Certified: Identity and Access Administrator (SC-300)
• CompTIA Security+

Compensation:

• The annual salary range is about $90,000to $120,000based on experience with a 10% annual bonus.

Benefits

• Medical insurance
• Dental insurance
• Vision insurance
• Commuter benefits
• 401(k) and employer match
• 16 days of PTO
• Disability benefits
• Paid parental leave
• Catered Lunches
• Annual Summer & Winter Events