Senior Security Engineer

StoneX Group Inc.; Bogotá; Hybrid; COP 150,000,000 - 250,000,000; Full time

Benefits offered by this job

Hybrid work

Office Bogotá

Job summary

StoneX Group Inc. in Bogotá is seeking a Senior Security Engineer to own and improve our security platforms across endpoints, networks, data protection, cloud, and emerging tech, ensuring visibility, prevention, and rapid response.

Join a globally distributed security engineering team with a focus on the Americas, and work in a hybrid environment to design, automate, and operate controls, dashboards, and reporting that safeguard people, data, and infrastructure.

Qualifications

• Experience designing and operating security platforms across endpoint, network, cloud, and data protection domains.
• Hands-on experience with EDR/XDR, SSE, ZTNA, CASB, and DLP implementations.
• Strong understanding of Windows, Linux, macOS, cloud platforms (AWS/Azure/GCP), networking, and IAM.
• Experience developing automation, integrations, reporting, or security telemetry via APIs or scripting.

Responsibilities

• Engineer, operate, and continuously improve enterprise security platforms across environments.
• Troubleshoot complex issues, drive platform optimization, and enhance preventative security capabilities.
• Design and maintain integrations, automation, data pipelines, dashboards, and reporting across security, ITSM, and asset management.
• Implement and enhance data protection controls including DLP, data classification, and labeling.
• Collaborate with Security Operations, Threat Intelligence, and Infrastructure teams to deliver integrated controls and support incident response.
• Participate in on-call and ensure platform availability, reliability, and performance.

Skills

Security engineering

Security operations

Infrastructure security

Data protection

EDR/XDR

Cloud security

Automation/scripting

Education

Bachelor's or Master's in Cybersecurity/Information Security/CS/Engineering

Tools

APIs

Scripting

Telemetry platforms

Job description

Connecting clients to markets – and talent to opportunity With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors.

Overview

Permanent, full-time, hybrid.

Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.

Corporate: Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to human resources and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies.

Responsibilities

The Senior Security Engineer is responsible for the technical ownership, reliability, and continuous improvement of StoneX's core security engineering platforms across endpoint, network, data protection, cloud, and emerging technology environments. The role is accountable for engineering, operating, and enhancing enterprise security controls that provide visibility, prevention, detection, and protection of StoneX's people, data, applications, and infrastructure.

Working as part of a globally distributed Security Engineering team, this role provides operational and engineering coverage with a particular focus on the Americas time zones (EST/PST), helping ensure platform stability, service continuity, and effective support for global business operations.

• Engineer, operate, and continuously improve enterprise security platforms, ensuring secure configurations, comprehensive coverage, high-quality telemetry, and effective policy enforcement across the organisation.
• Act as a senior technical subject matter expert for security engineering platforms, troubleshooting complex issues, driving platform optimisation, and enhancing preventative security capabilities.
• Design, build, and maintain integrations, automation, data pipelines, dashboards, and reporting capabilities across security, IT service management, and asset management platforms.
• Implement and enhance data protection capabilities, including Data Loss Prevention (DLP), data classification, sensitivity labelling, and monitoring controls across endpoint, network, email, cloud, and SaaS environments.
• Evaluate, deploy, and optimise security automation, AI-assisted tooling, and emerging security technologies to improve operational effectiveness and risk reduction.
• Design and implement controls that support the secure adoption of AI and Generative AI technologies, including governance, monitoring, and data protection requirements.
• Lead proof-of-concept activities, technology evaluations, and platform enhancements to improve security coverage, operational efficiency, and user experience.
• Develop and maintain engineering standards, platform documentation, operational runbooks, and reporting processes to support consistency, compliance, and service maturity.
• Collaborate with Security Operations, Threat Intelligence, Identity, Infrastructure, Cloud, and Application teams to deliver integrated security controls and support incident response activities.
• Participate in operational escalation and on-call support processes as required to maintain platform availability, reliability, and performance.

Qualifications

• Significant experience in Security Engineering, Security Operations, Infrastructure Security, or a related cybersecurity discipline.
• Strong hands-on experience designing, implementing, operating, and troubleshooting enterprise security platforms across endpoint, network, cloud, and data protection domains.
• Experience implementing and managing security controls such as Endpoint Detection and Response (EDR/XDR), Secure Service Edge (SSE), Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP).
• Experience designing and operating data protection programmes, including data classification, sensitivity labelling, policy tuning, and incident investigation.
• Strong understanding of enterprise operating environments, including Windows, Linux, macOS, cloud platforms (AWS, Azure, and/or GCP), networking, and identity and access management.
• Experience developing automation, integrations, reporting, or security telemetry solutions using APIs, scripting, or workflow automation tools.
• Strong analytical, troubleshooting, and problem-solving skills.

What Will Make You Stand Out

• Experience securing AI and Generative AI use cases and implementing related governance and data protection controls.
• Experience working within global, distributed engineering teams supporting 24x7 operational environments.
• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related discipline, or equivalent practical experience.
• Relevant industry certifications such as CISSP, Microsoft Security certifications (SC-100, SC-200, AZ-500), AWS Security certifications, or similar.

Working environment

• Hybrid – 4 days in office ((Office location: Avenida Carrera 9A - Avenida Carrera 9A # 115-06/30 Edificio Torre Tierrafirme Bogotá, 110111 Colombia).
• Full Time Employment type of contract