Cybersecurity Engineer / Information Security Engineer

dicedemo; New York (NY); On-site; USD 110,000 - 150,000; Full time

Job summary

dicedemo is seeking a Cybersecurity Engineer to protect our enterprise environment, applications, and customer data. You will implement security controls, monitor threats, and support IAM initiatives while coordinating with engineering, cloud, and network teams.

Ideal candidates have hands-on experience in complex enterprise settings, familiar with SIEM, vulnerability management, and regulatory security requirements. Collaboration across AWS/Azure/GCP is expected.

Qualifications

• Bachelor's degree in cybersecurity, CS, IT, engineering, or related field.
• 3+ years of cybersecurity or information security experience.
• Hands-on experience with security monitoring, threat detection, and incident response.
• Experience with SIEM platforms such as Splunk or Microsoft Sentinel.
• Knowledge of IAM, AD/Entra ID, MFA, SSO, RBAC, and privileged access management.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7.
• Understanding of networking concepts (TCP/IP, DNS, firewalls, VPNs, proxies).
• Familiarity with cloud security concepts and frameworks (NIST, CIS, ISO 27001, MITRE ATT&CK).
• Strong analytical, troubleshooting, and communication skills.

Responsibilities

• Design, implement, and maintain enterprise cybersecurity controls across apps, networks, cloud, endpoints, and infra.
• Monitor security tools for suspicious activity, vulnerabilities, and threats.
• Investigate security alerts and support incident response, containment, remediation, and root-cause analysis.
• Conduct vulnerability assessments and prioritize remediation with technology teams.
• Support IAM initiatives, including authentication, authorization, and privileged access controls.
• Configure and maintain security technologies such as SIEM, EDR/XDR, firewalls, IDS/IPS, and vulnerability management.
• Partner with software engineering, infra, cloud, and network teams to embed security best practices.
• Assist with security assessments, penetration testing, risk assessments, and remediation activities.
• Support cloud security initiatives across AWS, Azure, or GCP environments.
• Develop security automation and improve threat-detection and response processes.
• Maintain documentation related to security architecture, controls, incidents, and remediation.

Skills

Security monitoring

Threat detection

Vulnerability management

Incident response

SIEM platforms

IAM / AD / Entra ID / MFA / SSO

RBAC / Privileged access management

Networking concepts

Cloud security concepts

Analytical thinking

Education

Bachelor's degree in Cybersecurity, CS, IT, Engineering, or related field

Tools

Splunk

Microsoft Sentinel

Tenable

Qualys

Rapid7

EDR/XDR

Firewalls

Job description

Cybersecurity Engineer / Information Security Engineer

Position Overview

We are seeking an experiencedCybersecurity Engineer / Information Security Engineer to help protect our enterprise technology environment, applications, systems, and sensitive customer data. This individual will be responsible for implementing and maintaining security controls, identifying and responding to threats, managing vulnerabilities, and supporting identity and access management initiatives.

The ideal candidate has hands-on experience working within complex enterprise environments and understands the security, risk, and regulatory requirements associated with the financial services industry.

Key Responsibilities

• Design, implement, and maintain enterprise cybersecurity controls across applications, networks, cloud environments, endpoints, and infrastructure.
• Monitor security tools and environments for suspicious activity, vulnerabilities, and potential threats.
• Investigate security alerts and support incident response, containment, remediation, and root-cause analysis.
• Conduct vulnerability assessments and work with technology teams to prioritize and remediate identified vulnerabilities.
• SupportIdentity and Access Management (IAM) initiatives, including authentication, authorization, privileged access, and access controls.
• Configure and maintain security technologies such asSIEM, EDR/XDR, firewalls, IDS/IPS, vulnerability management, and endpoint security solutions.
• Partner with software engineering, infrastructure, cloud, and network teams to incorporate security best practices throughout the technology environment.
• Assist with security assessments, penetration testing, risk assessments, and remediation activities.
• Support cloud security initiatives across environments such asAWS, Microsoft Azure, or Google Cloud Platform.
• Develop security automation and improve processes for detecting, investigating, and responding to threats.
• Maintain documentation related to security architecture, controls, incidents, vulnerabilities, and remediation activities.
• Support compliance with applicable financial-services security standards and regulatory requirements.

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• 3+ years of experience in cybersecurity, information security, security engineering, or a related technical discipline.
• Hands-on experience with security monitoring, threat detection, vulnerability management, or incident response.
• Experience withSIEM platforms such as Splunk, Microsoft Sentinel, or similar technologies.
• Knowledge ofIAM, Active Directory, Entra ID, MFA, SSO, RBAC, and privileged access management.
• Experience with vulnerability management tools such asTenable, Qualys, Rapid7, or similar platforms.
• Understanding of networking concepts including TCP/IP, DNS, firewalls, VPNs, proxies, and network segmentation.
• Familiarity with cloud security concepts and technologies.
• Knowledge of common cybersecurity frameworks and standards such asNIST, CIS Controls, ISO 27001, and MITRE ATT&CK.
• Strong analytical, troubleshooting, and communication skills.

Preferred Qualifications

• Experience working withinbanking, financial services, insurance, or another highly regulated industry.
• Experience securing large-scale cloud and hybrid environments.
• Knowledge of application security, DevSecOps, and secure software development practices.
• Scripting or automation experience withPython, PowerShell, Bash, or similar technologies.
• Cybersecurity certifications such asCISSP, Security+, CEH, GIAC, CCSP, or CISM.
• Experience supporting regulatory examinations, security audits, or technology risk assessments.

What Success Looks Like

The Cybersecurity Engineer will help reduce organizational risk by proactively identifying vulnerabilities, strengthening security controls, improving threat detection and response capabilities, and protecting critical systems and sensitive financial and customer information.

Required Skills

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Engineering, or a related field, or equivalent professional experience.
• 3+ years of experience in cybersecurity, information security, security engineering, or a related technical discipline.
• Hands-on experience with security monitoring, threat detection, vulnerability management, or incident response.
• Experience with SIEM platforms such as Splunk, Microsoft Sentinel, or similar technologies.
• Knowledge of IAM, Active Directory, Entra ID, MFA, SSO, RBAC, and privileged access management.
• Experience with vulnerability management tools such as Tenable, Qualys, Rapid7, or similar platforms.
• Understanding of networking concepts including TCP/IP, DNS, firewalls, VPNs, proxies, and network segmentation.
• Familiarity with cloud security concepts and technologies.
• Knowledge of common cybersecurity frameworks and standards such as NIST, CIS Controls, ISO 27001, and MITRE ATT&CK.
• Strong analytical, troubleshooting, and communication skills.

Desired Skills

Preferred Qualifications

• Experience working within banking, financial services, insurance, or another highly regulated industry.
• Experience securing large-scale cloud and hybrid environments.
• Knowledge of application security, DevSecOps, and secure software development practices.
• Scripting or automation experience with Python, PowerShell, Bash, or similar technologies.
• Cybersecurity certifications such as CISSP, Security+, CEH, GIAC, CCSP, or CISM.
• Experience supporting regulatory examinations, security audits, or technology risk assessments.