Senior Cybersecurity Engineer

Our client in the Financial Services industry is looking for a Senior Cybersecurity Engineer to lead their AI security platform operations, Azure cloud security posture, and detection engineering across their production AI and highly regulated business systems. Working closely with the CISO and their core Engineering teams, you will operate the controls and detection layer that protect highly sensitive financial data. This role is ideal for a technically deep engineer who treats platform security as a craft and thrives at the intersection of cybersecurity, modern cloud engineering, and emerging AI security frameworks. Key Responsibilities AI Security, Platform Governance & Operations Enterprise AI Governance: Operate the security and governance layer for sanctioned enterprise AI platforms (e.g., Gemini Enterprise, ChatGPT Enterprise, Claude Enterprise), overseeing identity federation, SCIM provisioning, data connector governance, and compliance APIs. Vendor & Incident Readiness: Serve as the internal engineering counterpart to external vendors operating our AI Landing Zone; author runbooks, maintain operating documentation, and ensure incident response readiness. Detection & Vulnerability Engineering: Author and tune Conditional Access policies and detection content across SIEM/XDR platforms. Own the vulnerability management program and integrate metrics into observability dashboards (Grafana). Cloud Security & Infrastructure Engineering Azure Cloud Posture Management: Operate and secure our production Azure footprint, including AVD, FSLogix, virtual sandboxes, Front Door, APIM, Key Vault, and Private Endpoint design. Establish secure‑by‑default patterns for new workloads. Infrastructure as Code (IaC): Author and maintain production‑scale Terraform modules for all security and infrastructure deployments, embedding security directly into DevOps CI/CD workflows. Secure‑by‑Design Partnership: Partner with internal Solutions Engineers to conduct architecture reviews, define security requirements, and validate controls for custom AI applications and agentic workflows prior to production deployment. Broad Cyber Operations: Contribute to incident response, vendor security due diligence, and collaborate with broader security council initiatives. Qualifications Required Experience & Technical Skills Experience: 7–10 years of hands‑on experience in cybersecurity engineering, cloud security, or DevSecOps, with a recent focus as a senior individual contributor. Azure Expertise: Deep operator‑level experience with Microsoft Azure (Entra ID, Conditional Access, Defender for Cloud, Sentinel, Azure Policy, Key Vault, Private Endpoints, and core compute/storage). Advanced Terraform: Demonstrated proficiency authoring and operating Terraform at production scale. Note: Infrastructure as Code via Terraform is our required deployment path to Azure and is non‑negotiable. AI Security Tooling: Direct experience with modern AI security concepts, including shadow AI detection platforms, prompt‑level DLP, and the specific security risks associated with LLM applications and agentic workflows. Detection Engineering: Proven ability to engineer detections, author content, and tune alerts within modern enterprise SIEM/XDR platforms. Regulated Environments: Experience operating within environments handling material non‑public information (MNPI), financial records, or highly sensitive data, with a practical understanding of SEC, GLBA, SOC 2, or similar frameworks. Communication: Strong technical writing and verbal skills, with the ability to translate technical security risks into clear business impact for stakeholders. Preferred Qualifications Prior experience within Asset Management, Private Equity, or broader Financial Services. Experience securing cloud data warehouse environments (e.g., Snowflake), including row‑level security and data segregation. Experience with AI Landing Zone reference architectures or large‑scale production AI deployments. Industry certifications such as CISSP, GIAC (GCSA/GPCS), AZ‑500, or equivalents. #J-18808-Ljbffr