Senior Security Engineer

Overview

The Senior Security Operations Center (SOC) Engineer works under minimal supervision and performs information security tasks to ensure applications and projects meet defined quality standards. This role is critical in deploying and maintaining enterprise‑level endpoint security solutions and security platforms across our organization.

• Perform OS and network‑level troubleshooting and testing on all security tools.
• Support security analysis and Incident Response activities in collaboration with CIS staff.
• Migrate and decommission legacy security platforms while ensuring business continuity.
• Maintain security tools across Development, QC, and Production environments.
• Collaborate with cross‑functional teams to enhance FINRA's security posture.
• Apply established and ad hoc processes and techniques to identify, validate, prioritize, and track security risks.
• Operate and monitor established security controls.
• Identify control deficiencies and make appropriate recommendations.
• Ensure that controls operate effectively; resolve operating discrepancies.
• Identify, evaluate, and recommend new security technologies, techniques, and tools.
• Define, review, and promote information security policies, standards, guidelines, and procedures.
• Co‑lead internal process improvement initiatives. Provide feedback on processes by offering suggestions.
• Mentor and supervise junior staff in project‑level tasks.

• Install, configure, and maintain security monitoring endpoint security solutions across multi‑cloud environments, including AWS, Azure, GCP, OCI, and other cloud platforms as required by organizational infrastructure.
• Maintain security tools across Development, QC, and Production environments.
• Migrate and decommission legacy security platforms while ensuring business continuity.
• Implement, operate, and monitor established security controls to protect IT infrastructure.
• Define, review, and promote information security policies, standards, guidelines, and procedures.
• Identify, evaluate, and recommend new security technologies, techniques, and tools.
• Using scripting (e.g., Python) to automate incident response workflows.
• Co‑lead internal process improvement initiatives. Provide feedback on processes by offering suggestions.
• Collaborate with cross‑functional teams to enhance FINRA's security posture.

• Develop and tune SIEM rules, alerts, and playbooks to reduce false positives.
• Apply established and ad hoc processes and techniques to identify, validate, prioritize, and track security risks.
• Identify control deficiencies and make appropriate recommendations.
• Ensure that controls operate effectively; resolve operating discrepancies.

• Investigating, analyzing, and responding to network, application, and device threats.
• Support security analysis and Incident Response activities in collaboration with CIS staff.
• Perform OS and network‑level troubleshooting and testing on all security tools.

• Mentor and supervise junior staff in project‑level tasks.
• Ensure all work products meet/exceed FINRA standards.
• Demonstration of FINRA’s values.
• Collaboration, both in‑person and virtually, in furtherance of FINRA’s mission of investor protection and market integrity.

• Bachelor's degree in Computer Science, Information Security, or related field preferred and a minimum of seven (7) years of experience in systems administration, security engineering, or SOC environments. Equivalent combination of education and experience will be considered.
• Experience with EDR/XDR technologies is essential, including but not limited to:
  Microsoft Defender for Endpoint (MDE), Microsoft Defender for Identity (MDI), Qualys, Carbon Black, Crowd Strike, Trellix, Sentinel One, and Jamf Protect.
• Proven track record of large‑scale enterprise security deployments.
• Experience with security incident response and analysis.
• Strong problem‑solving and diagnostic abilities across enterprise‑wide systems.
• Experience working independently and as part of collaborative teams.
• Expert‑level knowledge of endpoint security platforms.
• Strong…