Security Engineer
Overview:
In this security-focused role, you will strengthen and mature the organization's security program as a technical leader for key security technologies. You will work across cybersecurity, infrastructure, and operations to improve posture and respond to incidents. You'll lead initiatives in EDR, attack surface management, and Zero Trust, enabling safer remote access and authentication. This position offers visibility and the ability to shape security foundations in a growing financial services environment. Join a team driving security improvements to protect data and ensure regulatory alignment.
Responsibilities:
- Own and mature the Endpoint Detection and Response (EDR) program
- Serve as SME for EDR technologies (e.g., CrowdStrike or similar)
- Lead and expand Attack Surface Management program
- Drive security engineering projects from planning through implementation and support
- Support MFA and access management initiatives
- Evaluate and optimize Zero Trust security technologies and strategies
- Modernize remote access solutions (ZTNA, SASE/SSE)
- Manage remediation of findings, vulnerabilities, and exposure
- Collaborate with infrastructure, operations, and business teams to improve security posture
- Research threats and recommend enhancements
- Document procedures, standards, and architectures
- Support incident response, investigation, containment, and recovery
Key requirements:
- 3-5+ years in Security Engineering, Cybersecurity, or Enterprise Security 3-5 years in information security/enterprise IT with focus on attack surface, endpoint, and identity security
- Demonstrated experience administering enterprise security tools and platforms
- Hands-on experience with EDR solutions (CrowdStrike, SentinelOne, Defender, Carbon Black, Cortex XDR, Trellix, or similar)
- Experience administering an attack surface management platform (Rapid7 or comparable) and building asset inventory from discovery
- Knowledge of SASE, CASB, and SSPM concepts; experience deploying at least one
- Experience implementing MFA for endpoint/workstation sign-in; familiarity with Dashlane or similar password management platforms
- Understanding of information security principles, data classification, and regulatory requirements for financial institutions (GLBA, FFIEC, ISO 27001)
- Experience in incident response activities and leading technical projects across teams
- Strong analytical, troubleshooting, and communication skillscollaborationclear communicationproblem-solvingEDR technologies (CrowdStrike, SentinelOne, Defender, Carbon Black, Cortex XDR, Trellix)
- Attack Surface Management (Rapid7 or comparable)
- Zero Trust security