Senior Cyber Security Engineer

Monex Global

Washington (District of Columbia)

On-site

USD 90,000 - 120,000

Full time

7 days ago

Be an early applicant

Application generator

A complete application in a minute — tailored resume and cover letter, ready to send.

Get past ATS filters

Benefits offered by this job

Medical insurance

Dental insurance

Vision insurance

Commuter benefits

401(k) and employer match

PTO 16 days

Disability benefits

Parental leave

Catered lunches

Annual events

Job summary

Monex Global is seeking a Senior Cyber Security Engineer to secure cloud and hybrid infrastructures across Azure, M365, and on‑prem environments. You will be the technical authority for cloud security, partnering with SOC, IT Ops, and global offices to implement Zero Trust, MFA, and encryption controls.

The role emphasizes Defender suite management, vulnerability governance, and automation via IaC and scripting. Strong cross‑team collaboration and communication are essential.

Qualifications

7–12 years in Endpoint/Infra/Cloud security engineering.
Hands-on with Microsoft Intune, Microsoft 365, Azure, and Microsoft Entra ID.
Experience with Defender technologies, Defender for Cloud/Endpoint/Identity and EDR/XDR.
Knowledge of Conditional Access, Zero Trust, Windows Hello for Business, BitLocker.
IaC with Terraform/Bicep, and scripting in PowerShell or Python.
Strong communication across security, IT, and business teams.

Responsibilities

Design, implement, and maintain secure cloud, endpoint, and identity management solutions across Azure, M365, Intune, and Entra ID.
Manage Defender stack and Sentinel for threat visibility and response.
Deploy and manage Windows, iOS, and Android devices with Intune and security baselines.
Support CA, MFA, Zero Trust, and Windows Hello for Business deployments.
Implement Azure security governance, RBAC, and PIM with policy compliance.
Maintain network security controls, VPNs, and secure access solutions.
Collaborate with SOC to investigate incidents and tune detections.
Automate security and deployment processes using PowerShell, Python, and IaC (Terraform/Bicep).
Support audits, risk assessments, and regulatory compliance efforts.

Skills

Endpoint Security

Cloud Security

Infra Security

DevSecOps

Automation

PowerShell

Python

Terraform

Bicep

Azure

Intune

Entra ID

Defender Suite

Zero Trust

RBAC

Tools

Microsoft Defender

Microsoft Sentinel

Intune

Terraform

PowerShell

Job description

Job Title: Senior Cyber Security Engineer

Location: Washington, DC

Status: Full-time; Exempt

Typical Work Hours: 8:30 a.m. to 5:00 p.m. Monday to Friday

Monex is a leading global financial solutions provider, offering a complete set of tools to support business growth and strategic financial operations. We specialize in FX risk management and international payments, helping corporate and institutional clients design tailored FX solutions to navigate currency volatility with confidence. Our team of FX specialists implement well-considered currency strategies, offering dedicated support to help clients manage their payment needs - whether for goods, services, or direct investments. In 2023, Monex facilitated $309 billion in FX turnover, managed $10.7 billion in assets, and processed 8.5 million transactions. With offices across North America (Canada, the US, and Mexico), Asia (Singapore), and Europe (the UK, Spain, and the Netherlands), we serve over 66,000 clients worldwide. By combining global reach with deep local market expertise, Monex enhances businesses with a suite of financial solutions and FX market analysis to help optimize efficiency, mitigate currency risk, and protect margins in an increasingly complex financial landscape.

Job Overview

As a Senior Cyber Security Engineer, you will be responsible for securing the organization’s cloud and hybrid infrastructure across Azure, Microsoft 365, and on-premises environments. You will serve as the technical authority for cloud security, working closely with the SOC, Infrastructure, and IT Operations teams. The role will have a global footprint and requires collaborative working with offices across the globe including Europe and the USA.

Responsibilities

Design, implement, and maintain secure cloud, endpoint, and identity management solutions across Microsoft Azure, Microsoft 365, Intune, and Entra ID environments.
Manage and optimize the Microsoft security stack, including Microsoft Defender for Cloud, Defender for Endpoint, Defender for Identity, Defender for Office 365, Defender XDR, and Microsoft Sentinel.
Deploy, secure, and manage Windows, iOS, and Android devices through Microsoft Intune, including compliance policies, security baselines, encryption, application protection, and device lifecycle management.
Support the rollout, adoption, and ongoing management of Windows Hello for Business, Conditional Access, Multi-Factor Authentication, and Zero Trust security controls.
Implement and maintain Azure security governance, including Azure Policy, RBAC, Privileged Identity Management (PIM), Identity Governance, and compliance frameworks.
Manage cloud and network security controls, including Azure Firewall, NSGs, Private Endpoints, VPN connectivity, segmentation, and secure access solutions.
Monitor and improve security posture through Secure Score, vulnerability management, compliance reporting, and continuous control optimization.
Collaborate with Security Operations teams to investigate incidents, tune detections, respond to alerts, and improve overall threat visibility.
Automate security, compliance, and deployment processes using PowerShell, Python, Infrastructure as Code (Terraform/Bicep), and CI/CD pipelines.
Support internal and external audits, risk assessments, remediation efforts, and regulatory compliance requirements within a regulated environment.

Required Professional Qualifications

7-12 years of experience in Endpoint Engineering, Infrastructure Security, Cloud Security, or a related engineering role.
Hands-on experience with Microsoft Intune, Microsoft 365, Azure, and Microsoft Entra ID.
Strong experience with Microsoft Defender technologies, Microsoft Sentinel, Endpoint Detection & Response (EDR/XDR), Data Loss Prevention (DLP), and enterprise endpoint security.
Experience implementing Conditional Access, Zero Trust principles, Windows Hello for Business, BitLocker, compliance policies, and identity security controls.
Knowledge of Azure security services, Azure Policy, RBAC, PIM, networking security, and cloud governance best practices.
Experience with Infrastructure as Code (Terraform and/or Bicep), PowerShell and/or Python automation, and DevSecOps methodologies.
Strong understanding of Windows 11 security, endpoint hardening, vulnerability management, patching, networking concepts, and enterprise mobility management.
Experience supporting security and compliance initiatives within regulated environments.
Excellent communication skills with the ability to work effectively across infrastructure, security, compliance, and business teams.

Preferred Qualifications