Technology Security Engineering Manager; Hybrid Office

Technology Security Engineering Manager (Hybrid within a Bank United Office Location)

#7233

Multiple Locations

New York , New York , United States

Miami Lakes , Florida , United States

Orlando , Florida , United States New York , New York , United States Ft. Lauderdale , Florida , United States Jacksonville , Florida , United States Miami Lakes , Florida , United States

JOB SUMMARY:

We are seeking a talented, passionate Technology Security Engineering Manager to join our team and help lead efforts to secure the Bank's cloud-based banking and support applications, infrastructure, SaaS platforms, and hybrid environments.

As a Technology Security Engineering Manager, you will be responsible for helping to develop, execute, and continuously improve the Bank's cloud security strategy in collaboration with Enterprise Architecture, Cloud Architecture, IAM, Application Security, Cyber Threat Intelligence, Infrastructure, Technology Risk, Data Platform, and Software Engineering teams.

Responsibilities include designing, implementing, and operating modern cloud-first security solutions and best practices across AWS, Azure, GCP, SaaS, and hybrid environments. The role also drives vulnerability remediation, security platform lifecycle ownership, control execution, executive reporting, and audit/regulatory readiness in alignment with the Technology Security operating model.

You will manage and mentor security professionals while partnering across IT and Security to reduce enterprise risk, improve remediation accountability, and maintain effective security operations.

This role is expected to operate in close alignment with the Director of Technology Security and the broader CIO / CISO operating model.

This role may require occasional work outside standard business hours to support security incidents, critical remediation activities, audit/regulatory requests, or high-priority technology initiatives.

• Designs, develops, and deploys modular cloud-first security and support systems across cloud, SaaS, and hybrid environments.
• Develops and enforces cloud security policies, standards, and guidelines to ensure compliance with regulatory and industry requirements, including NIST, FFIEC, GLBA, PCI-DSS, and related cybersecurity standards.
• Leads execution of cloud security strategy, standards, and operational controls across AWS, Azure, GCP, SaaS, and hybrid technology environments.
• Identifies opportunities to reduce cloud security risk for the Bank and lead the team in implementation of risk-reducing solutions.
• Accountable for identification, prioritization, tracking, and remediation coordination of cloud-hosted vulnerabilities, misconfigurations, exposed services, and security control gaps.
• Partners with enterprise Vulnerability Management teams develop and implement risk-based remediation strategies across cloud, SaaS, application, and hybrid environments.
• Establishes remediation standards, service level objectives, escalation paths, and reporting metrics for cloud vulnerabilities and security findings.
• Supports enterprise initiatives focused on reducing critical vulnerabilities, improving patch and configuration hygiene, and reducing overall technology risk exposure.
• Participates in security assessments and audits of cloud environments and assists with identification and remediation of potential security gaps and/or vulnerabilities.
• Validates remediation efforts through security assessments, configuration reviews, continuous monitoring, testing, and evidence collection.
• Plans, architects, and implements cloud security tools and technologies, such as firewalls, IDS/IPS, identity and access management, logging and monitoring, CSPM, CNAPP, CASB, and cloud-native security services.
• Owns lifecycle management of cloud security technologies, including evaluation, implementation, operation, optimization, roadmap planning, and retirement.
• Ensures integration between cloud security platforms, identity services, vulnerability management solutions, logging solutions, SIEM/SOAR capabilities, and security monitoring technologies.
• Drives automation initiatives to improve security operations, reporting, remediation workflows, control validation, and operational efficiency.
• Evaluates and develops a framework for SaaS security baselining and standardization, inclusive of IAM, data security, configuration, and access control considerations.
• Assists with security incidents or events in cloud and hybrid environments and collaborate with other teams to resolve issues and mitigate risks.
• Partners with Cyber Threat Intelligence, Security Operations, and Incident Response teams to operationalize threat intelligence and emerging threat information.
• Evaluates threats impacting cloud platforms and coordinate proactive mitigation activities for critical vulnerabilities, zero-day threats, and actively exploited issues.
• Research and stays updated on the latest cloud security trends, threats, attack patterns, and best…