[Hiring] Lead Security Engineer @U.S. Financial Technology

Role Description

The Lead Vulnerability and Compliance Analyst main responsibilities would be to act as a Subject Matter Expert for all programs within the VCM space. This would include:

• Conducting comprehensive vulnerability assessments using tools such as Wiz and Tenable.
• Leveraging strong analytical and problem-solving skills to identify weaknesses in US FinTech’s IT Infrastructure.
• Communicating findings effectively via reports/meetings to prioritize vulnerability remediation.
• Utilizing developed processes to track, prioritize, and ensure remediation of found vulnerability and compliance issues.
• Continuously monitoring US FinTech infrastructure for Vulnerability and Compliance related issues.
• Making improvements to monitors, scans, dashboards, and reporting.
• Working independently and in a team environment, collaborating effectively with other InfoSec Teams and IT Infrastructure teams.
• Eager to learn and adapt to emerging cloud technologies and tools in a fast-paced environment.

Qualifications

• Bachelor's Degree or equivalent required in Computer Science, Information Systems, Cyber Security, or a related technical field. Master’s Degree is a plus.
• Minimum of 7 years of experience with security engineering and operations, managing and supporting large, complex mission-critical systems, and with Vulnerability management tools.
• Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future.
• Subject matter expert of cloud-based critical infrastructure systems and security threats for these systems (AWS Cloud experience required).
• Familiarity with the latest security vulnerabilities, advisories, incidents, penetration techniques, and understanding of attacks.
• Strong understanding of AI Models, technologies, attack paths, vulnerabilities, and securing AI tools or technologies.
• Experience leveraging AI models to identify, research, or remediate vulnerabilities.
• Strong knowledge of networking fundamentals such as TCP/IP and basic packet analysis.
• Must have experience conducting comprehensive vulnerability assessments with monitoring tools (Wiz and Tenable).
• General knowledge and experience in Windows / Linux Operating Systems, baseline security configurations, audit, forensics, and Patch Management.
• Excellent interpersonal skills, presentation skills, and verbal/written communication skills.
• Ability to manage multiple priorities – projects, deliverables, and stakeholders.
• Active in the security industry with external networking relationships to maintain relevant knowledge of best practices.
• AWS Security, AWS Architect certifications desired.

Requirements

• Act as a Subject Matter Expert for the VCM program, processes, and tooling.
• Configure, tune, and maintain vulnerability management tools.
• Work with Security Architecture on new build outs, new business, new technologies, and new environments.
• Build out new Security baselines for CIS, DISA STIG, and custom baselines.
• Correlate Vulnerabilities with threat intelligence to assess exploitability and risk.
• Provide detailed risk assessments for discovered vulnerabilities.
• Enforce remediation timelines in accordance with Standard Operating Procedures.
• Collaborate with IT and DevOps teams to ensure timely remediation of vulnerabilities.
• Conduct regular and ad-hoc vulnerability scans using tools like Wiz or Tenable.
• Ensure alignment with internal security policies, regulatory requirements (NIST/SOC), and industry best practices.
• Act as a liaison between security, IT, development, and risk teams.
• Provide clear, actionable recommendations tailored to technical and non-technical audiences.
• Mentor Junior Analysts and provide guidance and training to junior members of the VCM team.
• Identify potential gaps in the vulnerability or compliance management programs and propose improvements.
• Develop and maintain Standard Operating Procedures, Frameworks, and Job Aids/HowTos.

Benefits

• Competitive total compensation package, including a performance bonus.
• 401k match.
• Healthcare coverage.
• PTO.
• A broad range of other benefits.