Cybersecurity Engineer

Cybersecurity Engineer – Platform Security

At Moody's, we unite the brightest minds to turn today's risks into tomorrow's opportunities. We do this by striving to create an inclusive environment where everyone feels welcome to be who they are—with the freedom to exchange ideas, think innovatively, and listen to each other and customers in meaningful ways. Moody's is transforming how the world sees risk. As a global leader in ratings and integrated risk assessment, we're advancing AI to move from insight to action—enabling intelligence that not only understands complexity but responds to it. We decode risk to unlock opportunity, helping our clients navigate uncertainty with clarity, speed, and confidence.

If you are excited about this opportunity but do not meet every single requirement, please apply! You still may be a great fit for this role or other open roles. We are seeking candidates who model our values: invest in every relationship, lead with curiosity, champion diverse perspectives, turn inputs into actions, and uphold trust through integrity.

The Cybersecurity Engineer – Platform Security is responsible for proactively identifying, managing, and resolving security vulnerabilities while driving operational excellence and continuous improvement across the enterprise environment.

Skills and Competencies:

• Proven experience in cybersecurity engineering, preferably in vulnerability management
• Hands-on experience with SQL and relational/database warehouse technologies
• Hands-on experience with Power BI, including creation and maintenance of dashboards; experience with Qualys, WIZ, and other relevant vulnerability management platforms
• Proficiency in Python and/or JavaScript for pipeline development, automation, and tooling
• Excellent written and oral communication skills, including the ability to interact directly with non-technical internal customers
• One or more preferred certifications including CISSP, CISA, CEH, GSEC, or CRISC
• Prior experience in a global organization working within a team environment
• Basic understanding of artificial intelligence concepts, with curiosity and enthusiasm for learning how AI tools can be used to improve processes and drive efficiency. Interest in exploring AI systems and a willingness to develop awareness of responsible AI practices, including risk management and ethical use

Education:

• Bachelor of Science or Bachelor of Arts degree, or relevant certifications, preferably in Information Systems, Computer Science, Computer Engineering, or equivalent
• 3–5 years of cybersecurity engineering experience within an enterprise environment

Responsibilities:

• Proactively identify and resolve risks to the organization, continuously strengthening and improving the security environment
• Apply knowledge of vulnerability frameworks including NIST, CVSS scoring, CWE, MITRE, OWASP, and CIS Benchmarks to assess and prioritize remediation efforts
• Maintain a consistent ticket closure rate above average, ensuring tasks are completed within a four-day average and updated with relevant information at least twice per week
• Prioritize security above all other tasks, avoiding escalations and ensuring assigned work does not require follow-up
• Collaborate across technical and non-technical teams by providing clear, plain-language responses and maintaining visibility of work and its organizational impact
• Challenge existing processes and propose alternative solutions, sharing knowledge and contributing to business enablement through a mindset of critical thinking and innovation
• Maintain independent-level proficiency in at least two supported technologies, with Qualys and WIZ required, and obtain at least one certification per year
• Complete a minimum of 50 hours of training annually to support ongoing professional development

About the Team:

Our Cybersecurity team is globally responsible for helping the organization balance risk by aligning policies and procedures with Moody's business and regulatory requirements. The team is responsible for the development, enforcement, and monitoring of security controls, policies and procedures, disaster recovery programs, Governance Risk and Compliance reporting, and the delivery of security services including the company's Cybersecurity program. By joining our team, you will contribute to a mission-critical function that protects and enables the business, while working alongside talented professionals who leverage innovative technologies, including artificial intelligence, to stay ahead of an evolving threat landscape.