Senior Security Control Engineer

Rockefeller Capital Management; New York (NY); On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health coverage

Vacation time

Retirement plan

Job summary

Rockefeller Capital Management is seeking a Security Control Engineer to architect, implement, and operate solutions that monitor and test the performance and reliability of security controls. The role emphasizes automation, resiliency, and rapid recovery to ensure high availability and secure operations.

You will drive continuous improvement in control reliability, reduce operational risk, and enable scalable security practices across cloud environments, aligning with risk management and

Qualifications

• 8-15 years of fundamental engineering experience in systems, software, and cloud infrastructure.
• Deep knowledge of networking, operating systems (Windows, Linux, Unix), and distributed/cloud architectures.
• Experience with security control testing.
• Expertise in monitoring, observability, incident response, and disaster recovery for cloud and data platforms.
• Familiarity with SRE principles, service-level objectives (SLOs), and error budgets.
• Experience with application security, vulnerability management, and secure software development lifecycle.
• Knowledge of security frameworks (NIST, MITRE) and cloud security standards (CSA, CIS).
• Experience with AI/ML security, cloud-native data protection, and automation of security operations.
• Familiarity with security monitoring, incident response, and threat intelligence in cloud environments.

Responsibilities

• Proactive Testing & Continuous Monitoring: Treat security controls as critical infrastructure and proactively test and monitor their performance and reliability.
• Automation & Self-Service Delivery: Engineer automation for control incident triage, remediation, and artifact generation; integrate into CI/CD pipelines and IaC.
• Control Resiliency & Survivability: Introduce runtime protection, ensure reproducible builds, lead investigations and incident response.
• Rapid Incident Response & Recovery: Apply standard incident response practices, develop quick cold start recovery, document risks and solutions.
• Continuous Improvement & Knowledge Sharing: Fix root causes, document designs and runbooks, educate teams on reliability principles.

Skills

Python scripting

PowerShell

Bash

CI/CD

DevOps practices

Communication

Tools

Azure

AWS

GCP

Terraform

CI/CD pipelines

Job description

About Rockefeller Capital Management

Rockefeller Capital Management was established in 2018 as a leading independent financial advisory services firm. Originally founded in 1882 as the family office of John D. Rockefeller, the Firm has evolved to offer strategic advice to ultra- and high-net-worth individuals and families, institutions, and corporations from offices in 35 markets throughout the United States, as well as an office in London. The Firm oversees $228 billion in client assets as of July 31, 2026.

Position

The Security Control Engineer is responsible for architecting, implementing, and operating solutions monitoring and testing performance and reliability of security controls. This role emphasizes operational excellence, automation, and proactive risk mitigation to ensure high availability, performance, and recoverability of critical security controls. The Control Engineer will drive continuous improvement in performance and reliability of security controls, reduce operational risk, and enable rapid recovery and business continuity.

Responsibilities

Proactive Testing & Continuous Monitoring

• Treat security controls as critical infrastructure and proactively test and monitor their performance and reliability
• Design and implement capabilities to proactively test control performance and reliability end-to-end.
• Build and maintain monitoring solutions for security controls to detect drift, degradation, and silent failures before they impact security operations.

Automation & Self-Service Delivery

• Engineer automation for control incident triage, remediation, and artifact generation.
• Integrate control reliability automation into CI/CD pipelines, infrastructure-as-code, and cloud-native services to reduce manual effort and scale efficiently.

Control Resiliency & Survivability

• Introduce runtime protection against control failures for critical security controls.
• Ensure controls are reproducibly built.
• Lead technical investigations, root cause analysis, and incident response for control incidents, performance degradation, and control drift.

Rapid Incident Response & Recovery

• Apply standard technical and security incident response practices, including SLO management, root cause analysis, and problem resolution.
• Provide quick cold start recovery capabilities to rebuild controls on demand after disruption.
• Document and communicate technical risks, solutions, and best practices to technical and non-technical stakeholders

Continuous Improvement & Knowledge Sharing

• Fix root causes to eliminate repeat problems and prevent recurrence.
• Document designs, data flows, changes, and troubleshooting runbooks to ensure shared learnings and prevent history from repeating.
• Educate teams on reliability principles and foster a culture of operational excellence.

Qualifications

• 8-15 years of fundamental engineering experience in systems, software, and cloud infrastructure
• Deep knowledge of networking, operating systems (Windows, Linux, Unix), and distributed/cloud architectures
• Experience with security control testing
• Expertise in monitoring, observability, incident response, and disaster recovery for cloud and data platforms
• Familiarity with SRE principles, service-level objectives (SLOs), and error budgets
• Experience with application security, vulnerability management, and secure software development lifecycle
• Knowledge of security frameworks (NIST, MITRE) and cloud security standards (CSA, CIS)
• Experience with AI/ML security, cloud-native data protection, and automation of security operations
• Familiarity with security monitoring, incident response, and threat intelligence in cloud environments

Skills

• Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).
• Proficiency in reliability automation tools, CI/CD, infrastructure-as-code, and DevOps practices.
• Hands-on experience with public cloud infrastructure and security (Azure preferred; AWS/GCP a plus)
• Ability to communicate complex technical concepts clearly and collaborate across teams
• Track record of engineering excellence, integrity, and continuous learning

Compensation Range

The anticipated base salary range for this role is $175,000 to $200,000. Base salary for the role will depend on several factors, including a candidate’s qualifications, skills, competencies, and experience, and may fall outside of the range shown. In addition, this role may be eligible for a discretionary bonus. Rockefeller Capital Management offers a comprehensive benefit package including health coverage, vacation time, paid leave, retirement plan, and more. Visit careers.rockco.com to learn more about additional opportunities and benefits offerings.

Disclosure

Rockefeller & Co. LLC, Rockefeller Financial LLC, Rockefeller Trust Company, N.A., The Rockefeller Trust Company (Delaware), Rockefeller Financial Services, Inc. and all other subsidiaries of Rockefeller Capital Management L.P. (individually and collectively, “Rockefeller”) is an equal opportunity employer and does not discriminate on the basis of race, religion, sex, gender, sexual orientation, gender identity or expression, national origin, citizenship, age, military or veteran status, marital or partnership status, caregiver status, legally recognized disability, or any other basis protected by applicable federal, state or local law (“protected characteristics”).

Rockefeller Capital Management participates in the E-Verify program in certain locations, as required by law.