Senior Security Engineer

Senior Security Engineer

A leading financial technology company focused on providing accessible money management and payment solutions. The organization is seeking a security professional to strengthen the security of its hybrid on-premises and Azure cloud infrastructure.

Responsibilities Include:

• Conduct security assessments and penetration testing across on-premises networks and Azure cloud environments.
• Perform manual and automated testing of network controls, firewalls, and cloud security configurations.
• Assess network security architecture throughout design, implementation, and deployment.
• Identify vulnerabilities, threats, risks, and compliance gaps and recommend remediation strategies.
• Review and enhance Azure security architecture, including Azure Firewall, Network Security Groups, Defender for Cloud/Security Center, Key Vault, and related services.
• Partner with IT, DevOps, Application Development, and Enterprise Architecture teams to address security findings.
• Integrate security controls and automated security testing into CI/CD pipelines.
• Provide guidance on IAM, data protection, network segmentation, and secure on-premises-to-cloud connectivity.
• Develop and enforce network security standards, policies, and best practices aligned with frameworks such as NIST, CIS, and OWASP.
• Prepare security assessment reports and communicate findings to both technical and non-technical stakeholders.
• Support incident response activities involving network or application security events.
• Stay current with Azure security capabilities, emerging threats, and evolving security best practices.

Qualifications:

Experience:

• 5+ years of professional experience in network security.
• Hands-on experience securing and assessing both on-premises and Azure cloud environments.
• Experience with security assessments, vulnerability scanning, and penetration testing.
• Experience with network security architecture and security control evaluation.
• Understanding of application security architecture and its integration with network infrastructure.
• Familiarity with SSDLC and DevSecOps practices.

Education:

• Bachelor's degree in Computer Science, Information Security, Cybersecurity, or a related field preferred.

Other qualifications/requirements:

• Strong knowledge of Azure security services and hybrid cloud security.
• Strong communication and collaboration skills.
• Ability to identify security risks and work with technical teams to drive remediation.
• Candidates must currently reside in West Los Angeles, CA.
• Ability to work onsite at least 3 days per week.

Must-Haves:

• 5+ years of Network Security experience
• Hands-on Azure Security experience
• Security Architecture experience
• Hands-on Security Assessments / Vulnerability Assessments
• Penetration Testing / Security Testing
• Experience with Azure Firewall
• Experience with Network Security Groups (NSGs)
• Experience with Defender for Cloud / Azure Security Center
• Experience securing hybrid on-premises + Azure environments
• Understanding of DevSecOps / SSDLC
• Strong communication and cross-functional collaboration skills
• Current residence in West Los Angeles, CA

Nice-to-Haves:

• Azure Security Engineer Associate certification
• CISSP, CEH, or CCSP
• Experience with Azure Key Vault
• Experience with Azure Application Gateway
• Microsoft Sentinel / Azure Sentinel
• Experience integrating security testing into CI/CD pipelines
• Terraform / Infrastructure as Code security
• Experience with NIST, CIS Benchmarks, OWASP, PCI DSS, or similar frameworks
• Financial services, fintech, banking, or payments industry experience
• Experience with security tools such as Tenable/Nessus, Qualys, Rapid7, Nmap, or similar