Senior Security Engineer

Overview

A leading financial services organization is seeking a Senior Security Engineer to join its cybersecurity team and play a critical role in protecting enterprise systems, cloud environments, applications, networks, and sensitive business data.

This individual will serve as a senior technical contributor across multiple security domains, including identity and access management, cloud security, vulnerability management, security operations, endpoint protection, data security, and incident response. The role requires a combination of hands-on engineering expertise, strong risk management capabilities, and the ability to partner effectively with technology and business stakeholders.

The ideal candidate thrives in regulated environments, possesses strong technical depth across modern security technologies, and enjoys driving initiatives that improve security maturity, operational effectiveness, and organizational resilience.

Key Responsibilities

Security Engineering & Architecture

• Design, implement, and continuously enhance enterprise security controls across cloud, network, endpoint, identity, and data protection environments.
• Provide security architecture guidance for infrastructure, cloud, application, and technology initiatives.
• Lead technical implementation of security solutions and ensure alignment with enterprise security standards.
• Evaluate existing controls and identify opportunities to improve security posture and operational efficiency.

Identity & Access Management

• Administer and improve identity security controls, including authentication, authorization, privileged access management, conditional access policies, and identity governance.
• Support role-based access control frameworks and user lifecycle management processes.
• Implement controls that strengthen account security and reduce organizational risk.

Security Operations & Threat Defense

• Manage and optimize security technologies including SIEM, endpoint security, data loss prevention, email security, vulnerability management, and threat detection platforms.
• Support security monitoring activities, threat hunting efforts, and incident investigations.
• Participate in incident response activities, root cause analysis, forensic investigations, and remediation planning.
• Develop detection content, response procedures, and operational playbooks.

Vulnerability Management & Risk Assessment

• Lead vulnerability management initiatives, including assessments, prioritization, remediation planning, and reporting.
• Conduct technical risk assessments across applications, infrastructure, cloud services, vendors, and operational processes.
• Partner with technology teams to implement risk mitigation strategies and security improvements.
• Develop metrics and reporting that provide visibility into organizational security risk.

Governance, Compliance & Security Standards

• Develop and maintain security standards, technical baselines, procedures, and implementation guidance.
• Support internal audits, regulatory reviews, and security compliance programs.
• Assist with control assessments and ensure security controls align with industry frameworks and regulatory requirements.
• Maintain documentation supporting governance, compliance, and operational security initiatives.

Cross-Functional Collaboration

• Partner with infrastructure, networking, cloud, application development, and business teams to integrate security requirements into enterprise initiatives.
• Review security impacts of system changes and infrastructure modifications.
• Provide recommendations that appropriately balance security requirements with operational and business objectives.
• Research emerging threats, technologies, and industry trends to guide future security investments.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related field, or equivalent professional experience.
• 7+ years of experience in cybersecurity, security engineering, security architecture, or advanced security operations roles.
• Proven experience designing, implementing, and supporting enterprise security technologies across multiple security domains.
• Experience leading security initiatives from planning and design through production implementation.
• Strong understanding of cloud security, endpoint protection, identity management, vulnerability management, and security monitoring.
• Experience securing Microsoft-based enterprise environments, including cloud and hybrid infrastructures.
• Strong networking knowledge including TCP/IP, DNS, DHCP, routing, switching, firewalls, VPN technologies, segmentation, and intrusion detection/prevention concepts.
• Experience administering Active Directory, Group Policy, identity services, and system hardening initiatives.
• Solid understanding of cybersecurity frameworks, threat intelligence methodologies, and modern attack techniques.
• Experience operating within regulated industries such as financial services, banking, insurance, healthcare, or legal services.
• Excellent analytical, troubleshooting, organizational, and communication skills.
• Ability to effectively communicate technical concepts to both technical and non-technical stakeholders.

Preferred Qualifications

• Experience with cloud-native security platforms and modern cloud security architectures.
• Hands-on experience with Microsoft security technologies, identity governance, data protection, and information security solutions.
• Experience supporting security monitoring, vulnerability management, and endpoint detection programs.
• Knowledge of enterprise data protection and data loss prevention technologies.
• Experience supporting security compliance initiatives aligned with major industry frameworks.
• Professional certifications such as CISSP, CCSP, CISM, or equivalent cybersecurity credentials.

What You'll Bring

• Strong technical leadership and security engineering expertise.
• A proactive, risk-based approach to cybersecurity.
• Excellent problem-solving and critical-thinking skills.
• Strong ownership mentality and attention to detail.
• Ability to build productive partnerships across technology and business teams.
• A passion for continuous improvement and advancing security maturity.
• Strong communication skills and the ability to influence positive security outcomes across the organization.

This opportunity offers the chance to work within a sophisticated and highly regulated environment where cybersecurity plays a critical role in protecting business operations, client information, and enterprise technology platforms. You'll have the opportunity to lead meaningful security initiatives, influence technology decisions, and contribute directly to the ongoing evolution of a mature cybersecurity program.