Senior Security Engineer

CI Financial; Denver (CO); On-site; USD 140,000 - 190,000; Full time

Benefits offered by this job

401(k) Plan with Employer Matching

Medical Plan options

Dental, Vision & Life Insurance

Disability Insurance

Paid Maternity & Parental Leave

Flexible Spending Accounts

Job summary

Corient is seeking a Senior Security Engineer to design, implement, and continuously improve enterprise security across endpoints, cloud, network, data, and security operations.

This hands-on role will own architecture and integration of core platforms including Rapid7, Defender, Purview, Mimecast, and Zscaler. You will collaborate with Security Operations, Infrastructure, Network, and App Engineering teams to lead complex initiatives and build scalable, secure environments onsite.

Qualifications

• Bachelor's degree in Computer Science, Engineering, Information Security, or a related field.
• 7+ years of experience in security engineering, infrastructure security, cloud security, or a related technical discipline.
• Hands-on experience across SIEM/detection engineering, vulnerability management, endpoint security, data protection, email security, and security automation.
• Experience with Rapid7 InsightIDR/InsightVM, Defender/Purview, Mimecast, and Zscaler or comparable platforms.
• Strong scripting/automation skills (PowerShell, Python, REST APIs).
• Solid understanding of Zero Trust, defense-in-depth, and NIST CSF/CIS MITRE ATT&CK.

Responsibilities

• Design and implement enterprise security platforms across endpoints, cloud, network, data, and security operations.
• Lead complex security initiatives focusing on architecture, integrations, migrations, and major technology changes.
• Engineer Rapid7 InsightIDR and SIEM capabilities, including telemetry, detection logic, and alerting.
• Develop SOAR workflows and platform integrations to automate investigations and responses.
• Engineer Rapid7 InsightVM for vulnerability visibility and remediation prioritization.
• Implement Microsoft Defender and Purview data protection controls and related policies.
• Manage Mimecast email security and secure mail-flow across platforms.

Skills

Security engineering

Cloud security

SIEM/detection

Vulnerability management

Email security

Zero Trust

Education

Bachelor's degree in Computer Science, Engineering, Information Security, or related field

Tools

Rapid7 InsightIDR

Rapid7 InsightVM

Microsoft Defender

Microsoft Purview

Mimecast

Zscaler

Job description

Join a team that values your ambition and empowers your growth

At Corient, we help high- and ultra-high-net-worth individuals and families to enjoy a full life, while enabling them to preserve their wealth for future generations, and provide for the people, causes and communities they care about. We focus on exceeding expectations, simplifying lives, and establishing legacies that last for generations. We are always looking for talented and motivated individuals to join our team. If you want to work for a company that values your contributions and supports your growth, we would like to meet you.

Senior Security Engineer

About the Role

We are seeking a Senior Security Engineer to design, implement, and continuously improve enterprise security capabilities across endpoint, cloud, network, data, and security operations environments.

This is a hands‑on senior engineering role responsible for the architecture, implementation, integration, and optimization of core security platforms, including Rapid7, Microsoft Defender, Microsoft Purview, Mimecast, and Zscaler. The engineer will serve as a technical owner for these platforms and translate security requirements and identified risks into scalable technical controls.

The role works closely with Security Operations, Infrastructure, Network, Cloud, and Application Engineering teams and requires the ability to independently lead complex technical initiatives and solve problems across multiple technology domains.

Key Responsibilities

Security Platform & Architecture Engineering

• Serve as a senior technical owner for enterprise security platforms, leading complex implementations, integrations, migrations, and major technology changes.

• Establish scalable security architectures, engineering standards, and configuration baselines aligned with secure-by-design, defense-in-depth, and Zero Trust principles.

• Evaluate existing and emerging capabilities to close security gaps, improve effectiveness, simplify the technology environment, and provide senior‑level technical guidance across engineering teams.

SIEM, Detection & Security Operations Engineering

• Engineer and evolve Rapid7 InsightIDR and supporting SIEM capabilities, including telemetry, detection logic, correlation, alerting, and visibility across enterprise environments.

• Partner with Security Operations and MDR providers to improve detection coverage, reduce operational noise, and translate lessons from incidents into improved controls.

• Develop SOAR workflows and platform integrations that automate enrichment, investigation, response, remediation, and other security processes.

Vulnerability Management Engineering

• Engineer and evolve Rapid7 InsightVM capabilities to provide comprehensive and actionable vulnerability visibility across endpoints, servers, network infrastructure, and cloud workloads.

• Improve vulnerability prioritization and remediation by incorporating severity, exploitability, asset criticality, and environmental context.

• Partner with technology teams to identify coverage gaps, validate remediation, and improve vulnerability management through automation and platform integration.

Microsoft Security & Data Protection

• Engineer and optimize Microsoft Defender capabilities across enterprise endpoints, servers, cloud workloads, and Microsoft 365 environments.

• Design and maintain preventative and detective controls, including endpoint protection, attack surface reduction, threat protection, and related security policies.

• Engineer Microsoft Purview Data Loss Prevention and information protection capabilities to protect sensitive information while balancing security requirements with legitimate business processes.

Email Security Engineering

• Engineer and optimize Mimecast or comparable Secure Email Gateway capabilities to protect against phishing, malware, business email compromise, impersonation, and other email‑borne threats.

• Maintain layered email security controls and secure mail‑flow architecture across Microsoft 365 and third‑party security platforms, including SPF, DKIM, and DMARC.

• Continuously improve email security controls based on emerging threats, security events, and observed control effectiveness.

Zero Trust & Network Security

• Support the continued development of Zero Trust capabilities using Zscaler and related technologies.

• Partner with Network Engineering to strengthen secure internet access, traffic inspection, application control, and network security enforcement.

• Improve security controls through the effective use of identity, device posture, application, network, and threat context.

Qualifications

• Bachelor’s degree in Computer Science, Engineering, Information Security, or a related field, or equivalent professional experience.

• 7+ years of experience in security engineering, infrastructure security, cloud security, or a related technical discipline, with demonstrated experience independently designing and implementing enterprise security solutions.

• Strong hands‑on experience across multiple security domains, including SIEM/detection engineering, vulnerability management, endpoint security, data protection, email security, and security automation.

• Experience with technologies such as Rapid7 InsightIDR/InsightVM, Microsoft Defender/Purview, Mimecast or comparable Secure Email Gateway technologies, and Zscaler or comparable SASE/Secure Web Gateway platforms.

• Strong scripting, automation, integration, and troubleshooting skills using technologies such as PowerShell, Python, REST APIs, and platform APIs.

• Strong understanding of enterprise security architecture, Zero Trust, defense‑in‑depth, and frameworks such as NIST CSF, CIS Controls, and MITRE ATT&CK.

Preferred Qualifications

• Experience engineering security technologies within a large, distributed enterprise or hybrid cloud environment.

• Experience integrating SIEM, MDR, endpoint security, vulnerability management, email security, ticketing, and SOAR technologies.

• Relevant security or technology certifications such as CISSP, CCSP, GIAC, Microsoft, Rapid7, Zscaler, Mimecast, or comparable certifications.

Physical Requirements

• This position requires the physical capabilities to work in an office environment, which may include prolonged periods of sitting at a desk and working on a computer. Corient seeks to make reasonable accommodations that enable individuals with disabilities to perform essential duties when possible.
• This position may require the ability to lift up to 15 pounds.
• This position is required to work onsite 4 days per week.

U.S. Eligibility Requirements

• Must be 18 years of age or older.
• Must have unrestricted work authorization to work in the United States. For U.S. employment opportunities, Corient hires U.S. citizens or permanent residents. Exceptions to these requirements will be determined based on shortage of qualified candidates with a particular skill. Corient will require proof of work authorization.
• Corient participates in E-Verify and will provide the federal government with your Form I-9 information to confirm that you are authorized to work in the U.S. If E-Verify cannot confirm that you are authorized to work, this employer is required to give you written instructions and an opportunity to contact Department of Homeland Security (DHS) or Social Security Administration (SSA) so you can begin to resolve the issue before the employer can take any action against you, including terminating your employment. Employers can only use E-Verify once you have accepted a job offer and completed the Form I-9.
• Must be willing to execute Corient’s Employee Agreement or Confidentiality and Non-Disclosure Agreement, which require, among other things, post-employment obligations relating to non-solicitation, confidentiality, and non-disclosure.

What You Can Expect from Us

Our dedication to the Employee Experience at Corient is aimed at supporting, empowering, and inspiring our talented team through:

• 401(k) Plan with Employer Matching
• Four Medical Plan options that is generously subsidized by Corient
• Employer paid Dental, Vision & Life and AD&D Insurance
• Employer paid Short‑term & Long‑term Disability
• Paid Maternity & Parental Leave
• Flexible Spending Accounts& Health Savings Accounts
• Dependent Care FSA
• Commuter & Transit FSA
• Corporate Discount Program - Perkspot
• Training Reimbursement
• Paid Professional Designations
• Giving back to the community - Volunteer days

Corient is the world’s largest multi-family office and non-bank wealth manager focused on serving ultra-high- and high-net-worth clients. As the industry’s only global professional services partnership, we combine the personal service and objectivity of a boutique with the scale and resources of a global institution. Our partnership model fosters collaboration over competition, bringing together the collective expertise of Corient to each relationship to deliver a transparent, client‑first experience. As a fully integrated global firm, we deliver comprehensive solutions across investment management, wealth strategy and family office services to help clients simplify their lives, manage their wealth and establish lasting legacies.

Full participation of all employees in a safe, healthy and respectful environment is key to individual and company success. We are committed to fully utilizing the abilities of all our employees and expect each of our employees to honor this commitment in their daily responsibilities.

We are an equal opportunity employer. All candidates will be recruited and, if applicable, selected and employed without regard to sex, race, religion, marital status, veteran status, age, national origin, sexual orientation, gender identity, color, creed, ancestry, disability, genetic information or any other basis prohibited by law.

This position description is intended to provide a general overview of the expectations and responsibilities of this position and may not include all tasks that may be assigned. As the nature of business demands change, so may the functions of this position. Additional duties and responsibilities may be assigned with or without notice.

Corient refers to the separate but affiliated entities under common control of Corient Holdings Inc. Client assets include all assets of Corient Holdings Inc., including majority- and minority-owned businesses.