Security Engineer - ATLANTA

FTS, in collaboration with a leading client in the Financial Services Industry, is seeking a talented and motivated Security Engineer to join their in-house team. In this role, you will advance application and data protection initiatives within a complex, Microsoft-centric enterprise environment. This individual will contribute to building and refining security capabilities, collaborating across technical and business teams to reduce risk, safeguard sensitive information, and elevate application security standards across the organization.

*** This is a hybrid role, so 2-3 days onsite per week in the Atlanta area ***

*** Only U.S. Citizens and Green Card Holders are eligible currently**

• Act as a hands-on contributor within the security function, working closely with software, infrastructure, and business stakeholders to uncover and reduce application-layer vulnerabilities
• Conduct vulnerability identification and risk prioritization using enterprise security scanning and assessment platforms (e.g., Qualys or comparable tools), and guide remediation efforts to closure
• Oversee certificate lifecycle and Public Key Infrastructure (PKI) operations, including management of internal and external certificates, documentation of security requirements, and coordination with certificate authorities
• Assess and manage third-party cyber risk through vendor risk intelligence and scoring solutions (e.g., Security Scorecard, Black Kite, or similar), partnering with vendors and internal teams to address identified gaps
• Monitor, investigate, and resolve security events within Microsoft Defender, ensuring potential threats are analyzed, documented, and mitigated in a timely manner
• Design, deploy, and maintain Data Loss Prevention (DLP) controls within Microsoft Purview to safeguard sensitive information across cloud services, endpoints, and enterprise applications
• Support incident tracking and remediation workflows by collaborating with IT and security operations teams to ensure findings are properly documented and resolved
• Contribute to the ongoing refinement of enterprise security standards, policies, and strategic initiatives within a large, distributed user environment.

• Demonstrated background in application security, including vulnerability identification, risk evaluation, prioritization, and coordinated remediation efforts
• Practical experience working with vulnerability management and security assessment platforms (e.g., Qualys or comparable enterprise tools)
• Experience administering and maintaining Public Key Infrastructure (PKI), including certificate lifecycle management, coordination with external certificate authorities, and related governance documentation
• Working knowledge of vendor and third-party cyber risk monitoring solutions such as Security Scorecard, Black Kite, or similar security rating platforms
• Experience leveraging ticketing or case management systems to track security findings and drive cross-functional remediation activities
• Prior experience supporting security operations within a large-scale enterprise environment (1,000+ end users preferred)
• Strong understanding of risk evaluation frameworks, scoring methodologies, and prioritization strategies to effectively reduce organizational exposure

This role operates within a Microsoft-centric enterprise ecosystem, including:

• Microsoft 365 (enterprise productivity and collaboration suite)
• Microsoft Defender for security event monitoring and threat investigation
• Enterprise-grade application security and vulnerability management platforms (e.g., Qualys or similar tools)
• Third-party/vendor cyber risk intelligence and security rating solutions

• Measurable reduction in application-layer risk through consistent vulnerability identification, prioritization, and resolution.
• Enhanced protection of sensitive information through well-designed and effectively enforced Data Loss Prevention controls.
• Greater transparency into vendor cyber risk, resulting in improved third-party security ratings and reduced external exposure.
• Established, repeatable security processes that scale with organizational growth and meaningfully lower overall enterprise risk