Cybersecurity Engineer

Job Title:
Cybersecurity Engineer
Department:
Information Security - 84

Reports to:

Chief Information Security Officer (
CISO) –

This role is critical to strengthening cyber resilience in a highly regulated financial environment by combining senior-level security analysis, incident response, and technical ownership of cybersecurity platforms. As a Cybersecurity Engineer, you will investigate high-severity alerts and escalated security events while also designing, configuring, tuning, and improving the tools and controls used to detect, prevent, and respond to threats. You will partner across IT, infrastructure, cloud, identity, development, AI, data, and business teams to reduce cyber risk, improve control effectiveness, and support secure operations across the enterprise.

Schedule: Monday – Friday, Work hours may vary based on operational needs and may include early mornings or extended hours as required.
Work Location: Onsite
Travel: Occasional (up to 10%)

• Lead investigation and response for high-severity cybersecurity alerts, escalated analyst cases, suspicious activity, and confirmed or suspected security incidents across endpoint, identity, email, network, cloud, and application environments.
• Own and continuously improve cybersecurity platforms, including configuration, tuning, integrations, alert logic, detection coverage, dashboards, reporting, automation, and operational workflows.
• Design, implement, and validate technical security controls across enterprise systems to improve prevention, detection, response, recovery, and audit readiness.
• Build and refine threat-informed detections, response playbooks, hunting methods, and control improvements using frameworks such as MITRE ATT&CK, NIST CSF 2.0, and other applicable security and regulatory expectations.
• Translate threat intelligence, vulnerability findings, incident lessons learned, and control gaps into practical engineering improvements that reduce risk and improve security operations effectiveness.
• Partner cross-functionally with IT, infrastructure, cloud, identity, development, AI, data, and business teams to embed effective security controls into systems, applications, platforms, and processes.
• Support audits, examinations, risk assessments, control validation, third-party risk reviews, and remediation activities by providing technical security expertise and evidence.
• Mentor Cybersecurity Analysts, provide escalation support, improve analyst workflows, and help build mature, repeatable security operations practices.

Required

• Demonstrated ability to independently investigate, scope, contain, and coordinate response to complex cybersecurity events and incidents using SIEM, EDR/XDR, NDR, email security, identity, cloud, data governance, or similar technologies.
• Hands-on experience administering, configuring, tuning, or improving cybersecurity tools and platforms in an enterprise environment.
• Strong technical understanding of endpoint security, identity and access management, network security, email security, cloud security, logging, vulnerability management, and data protection.
• Experience creating or improving detections, alerts, dashboards, response playbooks, security workflows, or automation to improve security operations effectiveness.
• Working knowledge of cybersecurity frameworks and threat-informed defense concepts, including NIST CSF, MITRE ATT&CK, CIS, and control validation methods.
• Ability to translate technical security issues into clear risk-based recommendations for technical teams, business stakeholders, and leadership.
• Ability to operate in a small-team environment where the role includes senior analyst responsibilities, platform ownership, escalation support, and hands-on…