Senior Security Controls Engineer

Rockefeller Capital Management; Trenton (NJ); On-site; USD 175,000 - 200,000; Full time

Benefits offered by this job

Health coverage

Vacation time

Paid leave

Retirement plan

Job summary

Rockefeller Capital Management is seeking a Security Control Engineer in New Jersey to architect, implement, and operate solutions for monitoring and testing security controls. The role emphasizes automation, resiliency, and continuous improvement to ensure high availability and recoverability of critical controls.

Ideal candidates have extensive engineering experience, cloud and security expertise, and strong scripting skills.

Qualifications

• 8-15 years of fundamental engineering experience in systems, software, and cloud infrastructure.
• Deep knowledge of networking, operating systems (Windows, Linux, Unix), and distributed/cloud architectures.
• Experience with security control testing and monitoring.
• Familiarity with security frameworks (NIST, MITRE) and cloud security standards (CSA, CIS).
• Proficiency in scripting and automation (Python, PowerShell, Bash, etc.).

Responsibilities

• Proactively test and monitor security controls for performance and reliability.
• Design automation for control incident triage, remediation, and artifact generation.
• Integrate control reliability automation into CI/CD pipelines, IaC, and cloud-native services.
• Lead technical investigations, root cause analysis, and incident response for control incidents.
• Document designs, data flows, changes, and troubleshooting runbooks for shared learning.

Skills

Python

PowerShell

Bash

CI/CD

Infrastructure as code

Cloud security

Security testing

SRE concepts

Communication

Tools

Azure

AWS

GCP

CI/CD pipelines

IaC

Job description

Rockefeller Capital Management is seeking a Security Control Engineer in New Jersey to architect, implement, and operate solutions for monitoring and testing security controls. The role emphasizes automation, resiliency, and continuous improvement to ensure high availability and recoverability of critical controls.

Ideal candidates have extensive engineering experience, cloud and security expertise, and strong scripting skills.