Senior Security Engineer

A leading financial services organization is seeking a seasoned cybersecurity professional to join its Information Security function. This individual will play a key role in strengthening and advancing enterprise security capabilities across infrastructure, cloud platforms, applications, endpoints, data protection, and identity services.

This position is ideal for someone who combines strong technical expertise with strategic thinking and can effectively partner with technology teams, business stakeholders, and external providers to build and maintain a mature security program within a highly regulated environment.

Position Responsibilities

Security Engineering & Architecture

• Design, deploy, and maintain enterprise security technologies and controls across cloud, network, endpoint, identity, and data protection environments.
• Provide technical leadership on security-related projects, including architecture reviews, solution design, implementation, and ongoing operational support.
• Evaluate existing security controls and recommend enhancements to improve overall security resilience.

Identity & Access Security

• Manage and improve identity security controls, including role-based access controls, multifactor authentication, conditional access policies, privileged access management, and identity governance processes.
• Support enterprise identity platforms and ensure security best practices are consistently applied across access management initiatives.

Security Operations & Threat Management

• Oversee and optimize security monitoring, endpoint protection, vulnerability management, email security, and network defense solutions.
• Conduct vulnerability assessments, prioritize remediation activities, and collaborate with technology teams to mitigate identified risks.
• Participate in incident response activities, including investigation, containment, root cause analysis, threat hunting, and process improvement efforts.
• Perform technical risk assessments for infrastructure, cloud environments, applications, vendors, and business processes.
• Develop security standards, operating procedures, implementation guidelines, and technical documentation.
• Assist with internal audits, regulatory reviews, and compliance initiatives aligned with recognized security frameworks and industry standards.
• Review technology changes and provide security guidance on infrastructure modifications, cloud deployments, access requests, and network configurations.

Collaboration & Strategic Initiatives

• Work closely with infrastructure, networking, cloud, development, and business teams to integrate security requirements into enterprise projects.
• Research emerging threats, industry trends, and security technologies to help drive ongoing program maturity and operational effectiveness.
• Serve as a trusted security advisor across both technical and non-technical teams.

Required Qualifications

• Bachelor's degree in Cybersecurity, Information Technology, Computer Science, or a related discipline, or equivalent professional experience.
• 7+ years of progressive experience within cybersecurity, security engineering, security architecture, or advanced security operations.
• Proven experience leading security initiatives from planning and design through deployment and support.
• Strong hands-on experience with enterprise security technologies spanning cloud, identity, endpoint, vulnerability management, and monitoring domains.
• Experience administering and supporting tools such as SIEM, endpoint detection and response (EDR), intrusion detection/prevention systems, vulnerability scanning platforms, email security solutions, and network security technologies.
• Experience securing Microsoft Azure and Microsoft 365 environments.
• Deep understanding of networking principles, including TCP/IP, DNS, VPNs, firewalls, segmentation, routing, switching, and intrusion detection technologies.
• Strong knowledge of Windows environments, Active Directory, Group Policy, system hardening, and security event analysis.
• Familiarity with industry security frameworks and methodologies such as NIST, CIS Controls, MITRE ATT&CK, and threat intelligence practices.
• Experience working within regulated industries such as financial services, banking, insurance, healthcare, or legal environments.
• Excellent troubleshooting, analytical, communication, and stakeholder management skills.

Preferred Qualifications

• Experience with Microsoft security technologies, including Entra ID, Purview, Information Protection, Data Loss Prevention (DLP), and Azure security services.
• Familiarity with vulnerability management solutions such as Tenable and endpoint security platforms such as Microsoft Defender or SentinelOne.
• Experience with cloud-native security platforms and CNAPP solutions.
• Knowledge of compliance and governance programs aligned to frameworks such as ISO 27001 and NIST.
• Industry certifications including CISSP, CCSP, CISM, or similar credentials.
• Hybrid work model with a combination of onsite and remote flexibility.
• Expected onsite presence multiple days per week based on business and operational requirements.
• Availability to support critical incidents, audits, infrastructure events, and occasional after-hours activities when necessary.

Why Join?

This opportunity offers the chance to work within a sophisticated technology environment where cybersecurity plays a critical role in protecting business operations and sensitive information. You'll contribute to meaningful security initiatives, collaborate with experienced technology professionals, and help shape the future direction of an expanding security program.