Senior Security Engineering

Overview A leading financial services organization is seeking a Senior Security Engineer to join its cybersecurity team and play a critical role in protecting enterprise systems, cloud environments, applications, networks, and sensitive business data. This individual will serve as a senior technical contributor across multiple security domains, including identity and access management, cloud security, vulnerability management, security operations, endpoint protection, data security, and incident response. The role requires a combination of hands-on engineering expertise, strong risk management capabilities, and the ability to partner effectively with technology and business stakeholders. Design, implement, and continuously enhance enterprise security controls across cloud, network, endpoint, identity, and data protection environments. Provide security architecture guidance for infrastructure, cloud, application, and technology initiatives. Lead technical implementation of security solutions and ensure alignment with enterprise security standards. Administer and improve identity security controls, including authentication, authorization, privileged access management, conditional access policies, and identity governance. Support role-based access control frameworks and user lifecycle management processes. Implement controls that strengthen account security and reduce organizational risk. Security Operations & Threat Defense Manage and optimize security technologies including SIEM, endpoint security, data loss prevention, email security, vulnerability management, and threat detection platforms. Support security monitoring activities, threat hunting efforts, and incident investigations. Participate in incident response activities, root cause analysis, forensic investigations, and remediation planning. Develop detection content, response procedures, and operational playbooks. Vulnerability Management & Risk Assessment Lead vulnerability management initiatives, including assessments, prioritization, remediation planning, and reporting. Conduct technical risk assessments across applications, infrastructure, cloud services, vendors, and operational processes. Partner with technology teams to implement risk mitigation strategies and security improvements. Develop metrics and reporting that provide visibility into organizational security risk. Develop and maintain security standards, technical baselines, procedures, and implementation guidance. Support internal audits, regulatory reviews, and security compliance programs. Assist with control assessments and ensure security controls align with industry frameworks and regulatory requirements. Partner with infrastructure, networking, cloud, application development, and business teams to integrate security requirements into enterprise initiatives. Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience. ~7+ years of experience in cybersecurity, security engineering, security architecture, or advanced security operations roles. ~ Experience leading security initiatives from planning and design through production implementation. ~ Strong understanding of cloud security, endpoint protection, identity management, vulnerability management, and security monitoring. ~ Experience securing Microsoft-based enterprise environments, including cloud and hybrid infrastructures. ~ Strong networking knowledge including TCP/IP, DNS, DHCP, routing, switching, firewalls, VPN technologies, segmentation, and intrusion detection/prevention concepts. ~ Experience administering Active Directory, Group Policy, identity services, and system hardening initiatives. ~ Solid understanding of cybersecurity frameworks, threat intelligence methodologies, and modern attack techniques. ~ Experience operating within regulated industries such as financial services, banking, insurance, healthcare, or legal services. ~ Experience with cloud-native security platforms and modern cloud security architectures. Hands-on experience with Microsoft security technologies, identity governance, data protection, and information security solutions. Experience supporting security monitoring, vulnerability management, and endpoint detection programs. Knowledge of enterprise data protection and data loss prevention technologies. Professional certifications such as CISSP, CCSP, CISM, or equivalent cybersecurity credentials. A proactive, risk-based approach to cybersecurity. Ability to build productive partnerships across technology and business teams. This opportunity offers the chance to work within a sophisticated and highly regulated environment where cybersecurity plays a critical role in protecting business operations, client information, and enterprise technology platforms. You'll have the opportunity to lead meaningful security initiatives, influence technology decisions, and contribute directly to the ongoing evolution of a mature cybersecurity program.