Job Description

We are seeking an experienced Senior Security Engineer to join a leading global wealth management firm serving high- and ultra-high-net-worth individuals and families. This hands-on role will focus on designing, implementing, and optimizing enterprise security capabilities across endpoint, cloud, network, data protection, and security operations environments.

The ideal candidate brings deep technical expertise across multiple security platforms and the ability to independently lead complex engineering initiatives. Working closely with Security Operations, Infrastructure, Network, Cloud, and Application Engineering teams, this individual will strengthen enterprise security architecture, improve threat detection, and develop scalable security controls.

Key Responsibilities

• Serve as a senior technical owner for enterprise security platforms, leading implementations, integrations, migrations, and ongoing optimization.

• Design and maintain scalable security architectures, engineering standards, and configuration baselines aligned with Zero Trust and defense-in-depth principles.

• Engineer and enhance Rapid7 InsightIDR and SIEM capabilities, including telemetry, detection logic, correlation, alerting, and security automation.

• Develop SOAR workflows and integrations to streamline threat investigation, incident response, remediation, and other security operations.

• Manage and optimize Rapid7 InsightVM vulnerability management capabilities, improving visibility, risk prioritization, and remediation across enterprise environments.

• Engineer Microsoft Defender security controls across endpoints, servers, cloud workloads, and Microsoft 365 environments.

• Implement and optimize Microsoft Purview Data Loss Prevention (DLP) and information protection capabilities to safeguard sensitive enterprise data.

• Strengthen email security through Mimecast or comparable platforms, including phishing prevention, threat protection, secure mail flow, and SPF, DKIM, and DMARC configurations.

• Advance Zero Trust and network security capabilities using Zscaler and related technologies, collaborating with engineering teams to improve access controls, traffic inspection, and threat prevention.

• Evaluate emerging security technologies, identify control gaps, and provide technical guidance to improve enterprise security effectiveness.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Security, or a related field, or equivalent professional experience.

• 7+ years of experience in security engineering, infrastructure security, cloud security, or a related technical discipline, including independently designing and implementing enterprise security solutions.

• Strong hands-on experience across multiple security domains, including SIEM, vulnerability management, endpoint protection, data security, email security, and automation.

• Experience with Rapid7 InsightIDR/InsightVM, Microsoft Defender/Purview, Mimecast or comparable email security platforms, and Zscaler or comparable SASE technologies.

• Proficiency in scripting, automation, systems integration, and troubleshooting using PowerShell, Python, REST APIs, or similar technologies.

• Strong understanding of enterprise security architecture, Zero Trust principles, and frameworks including NIST CSF, CIS Controls, and MITRE ATT&CK.

• Experience working in large, distributed enterprise or hybrid cloud environments preferred, along with relevant certifications such as CISSP, CCSP, GIAC, or platform-specific credentials.

Compensation & Schedule

• Schedule: Full-time, onsite four days per week.

• Location: New York

• Compensation: Not provided in the original description.

• Benefits: Comprehensive benefits package, including medical, dental, vision, retirement savings with employer matching, paid parental leave, professional development support, and additional employee benefits.