Security Operations Engineer

Bessemer Trust; Port Reading (NJ); On-site; USD 145,000 - 175,000; Full time

Benefits offered by this job

Hybrid work environment

401(k) with profit-sharing

Medical/dental/vision plans

Paid time off

Job summary

Bessemer Trust is seeking an experienced Security Operations Engineer to advance enterprise security capabilities across on-premises, cloud, and AI-enabled environments. You will design, implement, and continuously improve security controls, partnering with Infrastructure, Cloud Engineering, Risk Management, and Audit teams to strengthen the firm’s security posture.

The role requires deep hands-on security engineering expertise, a strategic mindset, and the ability to communicate complex

Qualifications

• Bachelor’s degree in computer science, engineering, information security or related discipline preferred; equivalent experience will be considered.
• Industry certifications preferred but not required.

Responsibilities

• Design, implement, and maintain enterprise security controls and platforms across cloud, endpoint, server, database, network, and AI-enabled environments.
• Research, evaluate, validate, and deploy security technologies that align with business objectives, regulatory requirements, and evolving threat landscapes.
• Continuously assess security architecture and operational effectiveness to identify gaps, recommend improvements, and enhance defensive capabilities.
• Support proactive threat detection, incident response, forensic investigations, containment, remediation, and recovery activities.
• Leverage automation and AI-assisted security operations capabilities to improve operational efficiency, threat detection accuracy, and response times.
• Develop and implement security controls for AI systems, including data protection, model access governance, prompt injection mitigation, API security, and monitoring of AI-generated outputs.
• Monitor emerging threats related to AI-assisted attacks, deepfakes, adversarial AI, automated phishing, and model exploitation techniques.
• Identify opportunities to operationalize AI and machine learning capabilities within security operations, including threat intelligence, anomaly detection, and workflow automation.
• Work closely with Internal Audit, Risk Management, Legal, and Compliance teams to remediate findings and strengthen control effectiveness.
• Maintain awareness of emerging threats, vulnerabilities, attack techniques, AI-related risks, and industry best practices to proactively improve organizational defenses.
• Contribute to security standards, procedures, operational playbooks, and technical documentation.
• Mentor junior colleagues and contribute to the development of security engineering best practices across the organization.

Skills

Security engineering

Threat detection

Automation

Cloud security

AI security

Incident response

Communication

Education

Bachelor’s degree in Computer Science or related

Tools

SIEM

EDR

IAM solutions

Job description

We are seeking an experienced Security Operations Engineer to help advance the next generation of security capabilities across our enterprise. This role is a technical leader responsible for designing, implementing, and continuously improving enterprise security controls that protect the firm while enabling innovation and operational resiliency. This role partners closely with Infrastructure, Cloud Engineering, Application Development, Risk Management, and Audit teams to strengthen the organization’s security posture across on-premises, cloud, and emerging AI-enabled environments.

The ideal candidate possesses deep hands-on expertise in security engineering and security operations, with a strong understanding of modern threat actors, cloud-native technologies, enterprise infrastructure, artificial intelligence technologies, and defensive security strategies. This individual will work with leadership on deployment, and optimization of security technologies, proactively reduce the attack surface, improve detection and response capabilities, and help mature the firm’s overall cybersecurity program.

This position requires a strategic mindset combined with strong technical execution skills and the ability to communicate complex security concepts in terms of business risk and operational impact.

Key Responsibilities

• Design, implement, and maintain enterprise security controls and platforms across cloud, endpoint, server, database, network, and AI-enabled environments.
• Research, evaluate, validate, and deploy security technologies that align with business objectives, regulatory requirements, and evolving threat landscapes.
• Continuously assess security architecture and operational effectiveness to identify gaps, recommend improvements, and enhance defensive capabilities.
• Support proactive threat detection, incident response, forensic investigations, containment, remediation, and recovery activities.
• Leverage automation and AI-assisted security operations capabilities to improve operational efficiency, threat detection accuracy, and response times.
• Develop and implement security controls for AI systems, including data protection, model access governance, prompt injection mitigation, API security, and monitoring of AI-generated outputs.
• Monitor emerging threats related to AI-assisted attacks, deepfakes, adversarial AI, automated phishing, and model exploitation techniques.
• Identify opportunities to operationalize AI and machine learning capabilities within security operations, including threat intelligence, anomaly detection, and workflow automation.
• Work closely with Internal Audit, Risk Management, Legal, and Compliance teams to remediate findings and strengthen control effectiveness.
• Maintain awareness of emerging threats, vulnerabilities, attack techniques, AI-related risks, and industry best practices to proactively improve organizational defenses.
• Contribute to security standards, procedures, operational playbooks, and technical documentation.
• Mentor junior colleagues and contribute to the development of security engineering best practices across the organization.

Qualifications

Required Experience

• 6+ years of experience in cybersecurity, security engineering, or security operations roles within enterprise environments.
• Strong hands-on experience securing enterprise infrastructure, cloud platforms, endpoints, and networks.
• Experience evaluating and securing AI-enabled technologies, SaaS platforms, or machine learning workflows within enterprise environments.
• Deep understanding of modern cybersecurity principles, threat actor methodologies, and defense-in-depth strategies.
• Proven ability to balance security requirements with operational and business objectives.
• Strong understanding of Active Directory, Windows/Linux server administration, endpoint security, networking, and identity security best practices.
• Experience securing public cloud platforms and cloud-native technologies
• Experience leveraging automation, scripting, and AI-assisted workflows to improve security operations efficiency.
• Familiarity with emerging AI security frameworks and guidance from organizations such as NIST, OWASP, and MITRE.
• Experience with security configuration management and system hardening tools.
• Familiarity with endpoint detection and response (EDR) platforms.
• Experience with web application security.
• Familiarity with Data Loss Prevention (DLP) concepts and platforms.

Professional Skills

• Strong analytical, troubleshooting, and problem-solving capabilities.
• Excellent written and verbal communication skills, including the ability to communicate technical issues and AI-related risks to the business.
• Strong organizational and project management skills with the ability to manage multiple priorities simultaneously.
• Collaborative team player with strong stakeholder management skills.
• Strategic thinker with the ability to operate both tactically and operationally in fast-paced environments.
• Self-motivated with a strong sense of accountability and ownership.

Education & Certifications

• Bachelor’s degree in computer science, Engineering, Data Science, Information Security or related discipline preferred; equivalent experience will be considered.
• Industry certifications preferred but not required.

Preferred Attributes

• Experience working in highly regulated industries such as financial services or healthcare.
• Familiarity with security frameworks and standards including NIST CSF, CIS Controls, ISO 27001, MITRE ATT&CK, and emerging AI governance frameworks.
• Experience supporting enterprise-scale security transformation initiatives and operational maturity programs.
• Passion for continuous learning and staying ahead of emerging cybersecurity threats, AI technologies, and evolving attack techniques.

The base salary range for this position is $145,000 - $175,000 per year. This range reflects the minimum and maximum base salary we reasonably expect to pay for this role. In addition, this position may be eligible to participate in the relevant business unit’s incentive compensation plan, and other compensation programs as applicable. Eligible employees may participate in a 401(k) program with a generous profit-sharing contribution, medical, prescription dental, and vision coverage; life insurance; disability coverage; paid holidays; vacation; and sick time, subject to plan terms and Company policies.

About Bessemer Trust

• Bessemer Trust is a family office, overseeing $250 billion in assets for 3,000 individuals and families of substantial wealth. Its more than 1,300 employees are singularly focused on private wealth management — disciplined investment management, sophisticated wealth planning, comprehensive family office services, and highly personalized client service.
• Established in 1907 as the family office for Annie and Henry Phipps, Bessemer Trust is in its seventh generation of ownership by the Phipps family. As a self-made entrepreneur, Henry Phipps was a founding partner and chief financial officer of Carnegie Steel.
• Bessemer Trust retains its original focus as a privately owned and independent wealth manager deeply committed to its mission of providing peace of mind to its clients. Bessemer’s adherence to putting clients’ interests first, fiduciary mindset, and highly collaborative culture are at the heart of everything the firm does.

Key Facts

• For more than 119 years, Bessemer Trust has operated continuously in a single line of business, independently owned by one family.
• Headquartered in New York’s Rockefeller Center, Bessemer Trust has 22 offices in total. Woodbridge, NJ, is one of the firm’s largest offices, which hosts a wide range of technology and operations professionals. In addition to its sizable presence in New York and Woodbridge, the firm provides client service through offices in Atlanta, Boston, Chicago, Dallas, Delaware, Denver, Garden City, Grand Cayman, Greenwich, Houston, Los Angeles, Miami, Naples, Nevada, Palm Beach, San Diego, San Francisco, Seattle, Stuart, and Washington, D.C.
• To watch a video about Bessemer Trust’s history, click here.
• To learn more about Bessemer Trust, click here.

About Our Employee Rewards And Benefits

• We provide exceptional rewards and benefits that are among the best in the industry, giving our people access to a wide range of options, including:
• Competitive base salary plus discretionary annual bonus for select positions
• A 401(k) plan with a generous annual profit-sharing contribution
• Personalized development and career opportunities, including tuition reimbursement support
• Comprehensive medical, dental, and vision plans with zero contributions for employee coverage
• Employee assistance (EAP) and wellness programs
• Hybrid work environment: 60% in office, 40% remote for most positions
• Paid time off and paid parental leave
• Employer-paid life insurance and short- and long-term disability coverage
• Legal services and financial wellness plans at no cost to employees

Bessemer Trust is committed to creating a diverse and inclusive environment and is proud to be an equal opportunity employer. We encourage candidates of diverse backgrounds to apply.