Senior Security Engineer

At Cetera, our technology team is at the forefront of transforming the future of technology in the financial industry, and we seek curious, practical individuals to help us pave the way. Our team is not intimidated by taking calculated risks, as they relish a good challenge and are eager to engage in problem-solving. As a member of our team, you will work alongside like-minded experts in a culture that is deeply rooted in innovation and progression.

Join us to be part of a transformative journey that can shape the industry's future.

We are currently seeking a mid-career Cybersecurity Engineer to add to our expanding Information Security team. The person who fills this role will focus on the security and compliance of our customers' systems and processes as well as play a pivotal role in safeguarding our organization's digital assets across our hybrid technology environment. The primary focus of this position will be supporting the Advisor Security Program and helping Cetera advisors secure their systems.

What you will do

* Design, implement, and maintain cybersecurity solutions to protect against evolving threats in both traditional data centers and AWS and Azure cloud hosting.

* Conduct security assessments, vulnerability assessments, and penetration testing in diverse environments.

* Monitor and respond to security incidents and breaches across on-premises and cloud platforms, ensuring swift resolution.

* Collaborate with cross-functional teams to integrate security best practices into systems and applications deployed in hybrid environments.

* Manage and optimize security tools and technologies, including firewalls, IDS/IPS, SIEM solutions, Microsoft Intune, Bitlocker, Defender, Tanium, Crowdstrike Falcon, SMARSH Cyber Compliance and SCCM, in both traditional and cloud environments, including Office
365.

* Develop and enforce security policies, standards, and procedures that apply to on-premises and cloud deployments.

* Stay updated on the latest cyber threats and security trends, providing proactive recommendations to mitigate risks in hybrid settings.

* Assist in security audits and compliance efforts, ensuring adherence to relevant security frameworks and standards.

* Provide dedicated support to financial advisors, assisting them in securing their systems and environments to meet regulatory and security standards.

* Emphasize customer service skills and experience by providing exceptional support and guidance to internal and external stakeholders, ensuring their cybersecurity needs are met with professionalism and efficiency.

* Support the Advisor Security Program by working closely with Cetera advisors to secure their systems, provide training, and ensure compliance with security policies and standards.

What you need to have

* Proficiency in securing both traditional data center environments and cloud hosting platforms (AWS and Azure), including Office
365.

* Experience with a wide range of security tools, including Microsoft Intune, Bitlocker, Defender, Tanium, SCCM, and more, adaptable to on-premises and cloud deployments.

* Familiarity with security frameworks and standards (e.g., NIST, ISO 27001, CSA) applicable to hybrid environments.

* An undergraduate degree is preferred, preferably related to security, technology, engineering, or other relevant area.

* At least 3-5 years relevant experience in IT security preferably in the financial services industry, including experience with related technologies, compliance, and development and implementation of policies and procedures.

* One or more professional certifications preferred (e.g., CISSP, CISM, CISA, CRISC, CEH, G-PEN, OSCP, G-SEC, etc.) but not required.

* Ability to problem solve as well as provide leadership and guidance to others as needed.

* Familiarity with regulatory and compliance mandates, security standards, and control risk guidance such as NIST CSF & 800-53, NYS-DFS Part 500 (Cybersecurity), FINRA, SEC, FFIEC, etc.

* Strong customer service skills and experience, with the ability to communicate effectively and provide support to a diverse range of stakeholders.