We are seeking an experienced Security Operations Engineer to help advance the next generation of security capabilities across our enterprise. This role is a technical leader responsible for designing, implementing, and continuously improving enterprise security controls that protect the firm while enabling innovation and operational resiliency. This role partners closely with Infrastructure, Cloud Engineering, Application Development, Risk Management, and Audit teams to strengthen the organization's security posture across on-premises, cloud, and emerging AI-enabled environments.
The ideal candidate possesses deep hands-on expertise in security engineering and security operations, with a strong understanding of modern threat actors, cloud-native technologies, enterprise infrastructure, artificial intelligence technologies, and defensive security strategies. This individual will work with leadership on deployment, and optimization of security technologies, proactively reduce the attack surface, improve detection and response capabilities, and help mature the firm's overall cybersecurity program.
This position requires a strategic mindset combined with strong technical execution skills and the ability to communicate complex security concepts in terms of business risk and operational impact.
Key Responsibilities- Design, implement, and maintain enterprise security controls and platforms across cloud, endpoint, server, database, network, and AI-enabled environments.
- Research, evaluate, validate, and deploy security technologies that align with business objectives, regulatory requirements, and evolving threat landscapes.
- Continuously assess security architecture and operational effectiveness to identify gaps, recommend improvements, and enhance defensive capabilities.
- Support proactive threat detection, incident response, forensic investigations, containment, remediation, and recovery activities.
- Leverage automation and AI-assisted security operations capabilities to improve operational efficiency, threat detection accuracy, and response times.
- Develop and implement security controls for AI systems, including data protection, model access governance, prompt injection mitigation, API security, and monitoring of AI-generated outputs.
- Monitor emerging threats related to AI-assisted attacks, deepfakes, adversarial AI, automated phishing, and model exploitation techniques.
- Identify opportunities to operationalize AI and machine learning capabilities within security operations, including threat intelligence, anomaly detection, and workflow automation.
- Work closely with Internal Audit, Risk Management, Legal, and Compliance teams to remediate findings and strengthen control effectiveness.
- Maintain awareness of emerging threats, vulnerabilities, attack techniques, AI-related risks, and industry best practices to proactively improve organizational defenses.
- Contribute to security standards, procedures, operational playbooks, and technical documentation.
- Mentor junior colleagues and contribute to the development of security engineering best practices across the organization.
QualificationsRequired Experience- 6+ years of experience in cybersecurity, security engineering, or security operations roles within enterprise environments.
- Strong hands-on experience securing enterprise infrastructure, cloud platforms, endpoints, and networks.
- Experience evaluating and securing AI-enabled technologies, SaaS platforms, or machine learning workflows within enterprise environments.
- Deep understanding of modern cybersecurity principles, threat actor methodologies, and defense-in-depth strategies.
- Proven ability to balance security requirements with operational and business objectives.
- Strong understanding of Active Directory, Windows/Linux server administration, endpoint security, networking, and identity security best practices.
- Experience securing public cloud platforms and cloud-native technologies
- Experience leveraging automation, scripting, and AI-assisted workflows to improve security operations efficiency.
- Familiarity with emerging AI security frameworks and guidance from organizations such as NIST, OWASP, and MITRE.
- Experience with security configuration management and system hardening tools.
- Familiarity with endpoint detection and response (EDR) platforms.
- Experience with web application security.
- Familiarity with Data Loss Prevention (DLP) concepts and platforms.
Professional Skills- Strong analytical, troubleshooting, and problem-solving capabilities.
- Excellent written and verbal communication skills, including the ability to communicate technical issues and AI-related risks to the business.
- Strong organizational and project management skills with the ability to manage multiple priorities simultaneously.
- Collaborative team player with strong stakeholder management skills.
- Strategic thinker with the ability to operate both tactically and operationally in fast-paced environments.
- Self-motivated with a strong sense of accountability and ownership.
Education & Certifications- Bachelor's degree in computer science, Engineering, Data Science, Information Security or related discipline preferred; equivalent experience will be considered.
- Industry certifications preferred but not required.
Preferred Attributes- Experience working in highly regulated industries such as financial services or healthcare.
- Familiarity with security frameworks and standards including NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, and emerging AI governance frameworks.
- Experience supporting enterprise-scale security transformation initiatives and operational maturity programs.
- Passion for continuous learning and staying ahead of emerging cybersecurity threats, AI technologies, and evolving attack techniques.
The base salary range for this position is $145,000 - $175,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit's incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies.
