Senior Security Engineer - Any Locations

The Senior Security Engineer works under minimal supervision and will perform information security tasks commensurate with their experience that ensure applications and projects meet defined quality standards.

We are seeking a Senior Security Engineer to join our Cyber Operations Team who will be responsible for Windows OS security, Microsoft O365 and Azure security. To be able to analyze security events. Candidate will be hands-on with respect to O365 for monitoring, analyzing, investigating, and creating new alerts within O365 and Azure.

Essential Job Functions

• Apply established and ad hoc processes and techniques to identify, validate, prioritize, and track security risks.
• Identify uncontrolled risks and recommend control improvements.
• Proactively identify security requirement deficiencies.
• Architect and design security control systems to address requirements.
• Operate and monitor established security controls.
• Identify control deficiencies and make appropriate recommendations.
• Ensure that controls are operating effectively; resolve operating discrepancies.
• Review, triage, and prioritize control output.
• Take appropriate action to resolve security discrepancies.
• Identify, evaluate, and recommend new security technologies, techniques, and tools.
• Define, review, and promote information security policies, standards, guidelines, and procedures.
• Lead/Co-lead internal process improvement initiatives. Provide feedback on processes by offering suggestions.
• Assist with adherence to technology policies and comply with all security controls.
• Ensure all work products meet/exceed FINRA standards.
• Good technical understanding of network fundamentals and common Internet protocols.
• Technical understanding of the permissions, roles, and security within both O365 tenant and Azure Cloud.
• Understanding of Windows OS, both desktop and server versions. Includes knowledge of Windows security, events registry.
• Must have a demonstrated capability to write scripts and code in PowerShell.
• Must have strong verbal and written communication skills; ability to communicate effectively and clearly to both technical and non-technical staff.
• Operational experience monitoring system logs, skills with a SEIM (ability to search and build complex queries).
• Distinctive investigative, problem-solving, and analytical skills.
• Technical security certifications like Security+, Ethical Hacking or GIAC Security a plus.

Education/Experience Requirements

• Bachelor's degree in Computer Science, Information Systems, or related discipline with at least five (5) years of related experience, or equivalent training and/or work experience.
• Experience must include direct experience in several of the key areas listed: securing networks and systems architecture, design and implementation, secure software assurance, intrusion detection, defense and incident response, security configuration management, access controls design and implementation, and security policy and standards development.
• In-depth knowledge of one or more communications protocols.
• Experience with more than one Cyber Security tools, including: Configuration Assessment, Log Aggregation, Integrity Verification, Web Application Security Testing, Network Access Control System, Network Intrusion prevention systems, and Endpoint Security Solutions.
• Strong written and verbal technical communication skills.
• Demonstrated ability to develop effective working relationships that improved the quality of work products.
• Should be well-organized, thorough, and able to handle competing priorities.
• Ability to maintain focus and develop proficiency in new skills rapidly.
• Ability to work in a fast-paced environment.
• In-depth knowledge of more than one Information Security principle and discipline.

Work Conditions

• Occasional travel and extended hours may be required