We’re looking for a proactive and technically curious Information Security Engineer to join our Technology & Information Security team. In this role, you’ll work within an engineering-minded security organization that values modern architectures, hands-on problem solving, and high-impact technical contributions. You’ll help safeguard a complex, highly regulated environment while collaborating with teams who move quickly, think strategically, and execute with precision.
If you thrive in dynamic environments, enjoy building and refining security capabilities, and want to make a meaningful impact on an organization’s security posture - you’ll feel right at home here.
What You'll Do: Engineer and operate modern security platforms.
Implement, run, and optimize enterprise-level security tooling across detection, identity, cloud, endpoint, and governance technologies. Conduct deep-dive security assessments.
Evaluate systems, configurations, and architecture through hands-on testing and analysis—delivering actionable insights that directly influence engineering and business decisions. Strengthen core security operations.
Support and mature processes such as:
- Malware response and remediation
- Vulnerability management and patch governance
- SIEM log analysis, correlation, and monitoring
- Incident documentation, reporting, and lifecycle management
Embed security into applications, infrastructure, and business initiatives from the outset, partnering with IT and engineering teams to identify risks and drive effective mitigations. Contribute through data, insights, and experimentation.
Analyze trends, surface patterns, and help refine the firm’s Information Security Program through continuous improvement and cross-functional engagement.
What Makes This Role Unique:
- Technical leadership that “gets it.”
You’ll work under leaders with real engineering backgrounds who understand workflows, decision points, constraints, and trade-offs because they’ve been hands-on themselves. - Security built on innovation, not stagnation.
Our program prioritizes modern architectures, continuous improvement, and thoughtful evaluation of emerging standards, frameworks, and controls. - Access to state-of-the-art platforms.
Gain experience with advanced detection systems, automated response tooling, identity and access platforms, cloud-native security solutions, and governance technologies used across the industry. - High-rigor environment with real impact.
Build and refine capabilities in a financial-services context where precision, repeatability, and operational discipline matter—and influence enterprise-level direction. - Collaboration with top industry partners.
Participate in vendor assessments, tooling evaluations, and integrations that shape an enterprise-grade security program. - Opportunities for broad domain depth.
Contribute to initiatives spanning detection engineering, identity architecture, cloud security, automation, governance, and more.
What You Bring:
- Bachelor’s degree in Computer Science, Information Systems, Cybersecurity, or equivalent experience.
- 3–5 years of hands-on experience in information security, IT operations, or adjacent engineering roles; experience in financial services is a plus.
- Familiarity with modern security tools, frameworks, and standards (SIEM, EDR, vulnerability scanners, CIS, NIST, ISO 27001).
- Familiarity with identity and access management (IAM) solutions, such as Okta, including integration with applications and security systems.
- Experience with automation, including scripting languages (e.g., Python, PowerShell, Bash) to streamline security processes, workflows, and response actions.
- Ability to operate with autonomy, accountability, and comfort in fast-moving environments.
- Exceptional communication and collaboration skills with the ability to influence across teams.
- Analytical mindset with a high bar for detail, documentation, and operational excellence.
