Sr. Cybersecurity Engineer

DescriptionThe Senior Cybersecurity Engineer is responsible for designing, implementing, and operating enterprise security controls across network, cloud, and identity domains. This role leads detection and response engineering, ensures the effectiveness of security controls, and partners with technology and business teams to manage cybersecurity risk in alignment with regulatory and industry frameworks.The position plays a key role in advancing Zero Trust architecture, strengthening monitoring and response capabilities, and supporting compliance obligations within a financial services environment.What you will do:Security Engineering & ArchitectureDesign, implement, and maintain enterprise security controls across network, cloud, endpoint, and identity platformsSupport the development and adoption of Zero Trust architecture principles across the enterprisePartner with architecture and engineering teams to define and validate security requirements for new systems and applicationsEnsure security is embedded into system design and software development lifecycle processes (DevSecOps)Detection & Response EngineeringDevelop, implement, and continuously improve detection use cases within SIEM/XDR platformsLead incident response activities, including investigation, containment, eradication, and post-incident analysisPerform threat hunting and proactively identify potential adversary activityDrive automation of response workflows and orchestration of security operationsCloud & Platform SecuritySecure cloud environments (e.g., AWS, Azure, M365) through appropriate control design and configurationImplement and manage cloud security posture management (CSPM) and workload protection capabilitiesReview and assess cloud architectures for security risks and compliance with internal standardsIdentity & Access SecurityPartner with identity teams to strengthen IAM, PAM, and identity-centric security controlsSupport implementation of least privilege access, strong authentication, and access governance practicesContribute to identity-driven Zero Trust initiativesData SecuritySupport enterprise data protection strategies including data classification, protection, and monitoringEnhance and mature capabilities beyond traditional DLP to align with business and regulatory requirementsEnsure secure data exchange and integration with third parties and external partnersThreat & Vulnerability ManagementSupport vulnerability management through risk-based prioritization and remediation guidanceIntegrate threat intelligence into detection and response processesContinuously evaluate emerging threats and control effectivenessRisk, Compliance & GovernanceSupport compliance with regulatory requirements (e.g., SEC, FINRA) and internal security policiesPartner with risk, audit, and compliance teams to demonstrate control effectivenessContribute to cybersecurity metrics, reporting, and risk posture communication to leadershipParticipate in and support the Security Incident Response Team (SIRT)Collaboration & Continuous ImprovementServe as a subject matter expert to business units and technology teamsEstablish and manage relationships with security vendors and service providersContribute to continuous improvement of cybersecurity capabilities, processes, and control effectivenessSupport security awareness and training initiatives where appropriateWhat you will bring:RequiredBachelor’s degree in Cybersecurity, Information Technology, or related discipline (or equivalent experience)8+ years of experience in cybersecurity engineering, with progressive responsibility in security operations and infrastructureStrong experience across one or more of the following domains:Security engineering (network, endpoint, cloud)Detection and response engineering (SIEM/XDR)Identity and access managementDeep understanding of cybersecurity principles, frameworks, and control design (e.g., NIST CSF)Experience with incident response, threat detection, and investigation processesKnowledge of enterprise environments including networks, systems, and cloud platformsStrong analytical, problem-solving, and communication skillsPreferredRelevant certifications such as:CISSPCloud security certifications (AWS, Azure)GIAC certifications (e.g., GCIA, GCIH, GCED)Experience in financial services or highly regulated environmentsFamiliarity with regulatory and compliance expectations (SEC, FINRA, etc.)Experience with security automation and scripting (e.g., Python, PowerShell)Knowledge of threat frameworks such as MITRE ATT&CKOtherAbility to balance technical depth with risk-based decision makingStrong collaboration skills across engineering, risk, and business teamsProven ability to operate effectively in a fast-paced, evolving threat landscapeCommitment to maintaining current knowledge of cybersecurity trends, threats, and technologiesWho we are:We put the best interests of our clients, employees, communities, and environment first in everything we do. We’re dedicated to fostering a culture of collaboration, diversity, and inclusion that supports employee growth. We believe this creates equal opportunities for our employees — and better outcomes for our clients and communities. We offer a robust benefits package designed to integrate life and work and to support our employees. Benefits include, but are not limited to; comprehensive medical, dental and vision insurance, paid time off, 401k plan, tuition reimbursement, student loan repayment program, wellness benefits and volunteer programs*. #NatixisIMCultureIn accordance with the Massachusetts Wage transparency act, the expected annual base salary for this Boston, MA, based position is $115,000 - $161,000. Actual annual base salaries may vary based on factors including but not limited to education, training, experience, and other job-related factors. However, base pay if hired will be determined on an individualized basis and is only part of the total compensation package, which, depending on the position, may also include discretionary bonuses and other Natixis sponsored benefit programs.Natixis Investment Managers is an equal opportunity employer and does not discriminate in recruiting, hiring, training, promotion or other terms, conditions and privileges of employment on the basis of race, color, age, national origin, ancestry, religion, sex (including pregnancy), sexual orientation, gender identity, genetic information, military or veteran status, physical or mental disability, or any other status protected by law.Natixis Investment Managers does not charge fees to participate in the interview process or for employment equipment and does not send employment offers through social media channels. We take security and privacy seriously. If you have been contacted by someone claiming to represent Natixis Investment Managers and are unsure about the legitimacy of the communication, please verify the contact details with Natixis Investment Managers directly.*Benefits eligibility is for permanent employees of Natixis Investment Managers. Interns, contractors and temporary workers are not eligible for benefits.