Senior Security Engineer

Key Responsibilities

• Design, implement, and maintain enterprise security controls across on-premises and cloud environments
• Secure Microsoft Azure infrastructure services and hybrid cloud deployments
• Administer and support Microsoft Defender Suite Defender for Cloud and Microsoft Sentinel
• Implement and manage Identity and Access Management (IAM) solutions
• Secure Active Directory, Azure AD Entra ID, Group Policy, and privileged access environments
• Lead vulnerability management remediation and infrastructure hardening initiatives
• Support security monitoring, threat detection, incident response, and forensic investigations
• Collaborate with Infrastructure, Network, DevOps, and Application teams to implement security best practices
• Conduct security assessments, risk evaluations, and compliance reviews
• Develop security standards, policies, procedures, and operational runbooks
• Support regulatory audits and compliance requirements including SOX, PCI-DSS, FFIEC, NIST, and related financial industry frameworks
• Participate in disaster recovery and business continuity security planning

Required Qualifications

• 10 years of Information Security or Security Engineering experience
• Strong experience securing Microsoft enterprise environments
• Hands-on expertise with Azure Security Defender for Cloud and Microsoft Sentinel
• Experience with Active Directory, Azure AD Entra ID, Conditional Access, MFA, and Identity Governance
• Strong understanding of Zero Trust security principles
• Experience with vulnerability management and remediation tools
• Knowledge of endpoint security (EDR/XDR) technologies and security monitoring platforms
• Experience implementing infrastructure hardening standards and security baselines
• Strong knowledge of security frameworks including NIST CIS Controls and financial industry compliance standards
• Experience supporting production environments and critical business systems

Preferred Qualifications

• CISSP, CISM, CCSP, Azure Security Engineer or equivalent certifications
• Experience within Banking, Lending, Mortgage, FinTech, or Financial Services organizations
• Experience with SIEM, SOAR, and threat intelligence platforms
• Familiarity with DevSecOps practices and cloud-native security controls
• Experience with privileged access management (e.g., CyberArk, BeyondTrust)