Senior Security Engineer

Koitecc Solutions; New York (NY); On-site; USD 140,000 - 210,000; Full time

Job summary

Koitecc Solutions in New York is seeking an experienced Senior Security Engineer to lead cybersecurity efforts across monitoring, incident response, threat detection and vulnerability management. You will partner with Technology teams to protect systems and networks against evolving threats.

Responsibilities include managing vulnerability management and EDR, tuning SIEM like Splunk, conducting audits, and guiding incident response with clear communication and hardening recommendations.

Qualifications

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Certifications such as CISSP, CISM, CEH, or other security certifications.
• 8-10 years of experience in system security engineering, network security, application security, cloud security, or related fields.
• Strong knowledge of security best practices, standards (NIST, ISO 27001), and frameworks (CIS Critical Security Controls, CSA).
• Hands-on experience with security technologies (e.g., Palo Alto, Cisco firewalls, IDS/IPS, SIEM tools like Splunk, Sumo Logic, EDR platforms like CrowdStrike, and vulnerability scanning tools).
• Expertise in risk assessment, penetration testing, incident response, and networking protocols (TCP/IP, VLANs, VPNs, routing/switching).

Responsibilities

• Administer the vulnerability management platform, overseeing configurations, vulnerability scanning, remediation, and reporting.
• Manage the EDR platform, handling event investigations, alert/report design, policy configurations, and endpoint agent updates.
• Conduct regular audits to ensure the effectiveness of EDR and vulnerability scanning applications.
• Monitor SIEM and cloud environments for potential security incidents and enhance Splunk alerts, reports, and dashboards.
• Lead incident response efforts, minimizing business impact, communicating findings, and making mitigation and hardening recommendations.

Skills

Security monitoring

Incident response

Threat detection

Vulnerability management

Risk assessment

Penetration testing

Networking fundamentals

Education

Bachelor's degree in Computer Science/Information Technology or related field

Tools

Palo Alto

Cisco firewalls

IDS/IPS

Splunk

Sumo Logic

CrowdStrike (EDR)

Vulnerability scanning tools

EDR platforms

Job description

Our hedge fund client is seeking an experienced Senior Security Engineer to join their New York office. In this role, you will lead the firm's cybersecurity efforts, focusing on security monitoring, incident response, threat detection, and vulnerability management. Working closely with cross-functional teams in the Technology department, you will ensure that systems and networks are protected against emerging cybersecurity threats.

Key Responsibilities:

1. Administer the vulnerability management platform, overseeing configurations, vulnerability scanning, remediation, and reporting.
2. Manage the EDR platform, handling event investigations, alert/report design, policy configurations, and endpoint agent updates.
3. Conduct regular audits to ensure the effectiveness of EDR and vulnerability scanning applications.
4. Monitor SIEM and cloud environments for potential security incidents and enhance Splunk alerts, reports, and dashboards.
5. Lead incident response efforts, minimizing business impact, communicating findings, and making mitigation and hardening recommendations.

Qualifications:

1. Bachelor's degree in Computer Science, Information Technology, or a related field.
2. Relevant professional certifications such as CISSP, CISM, CEH, or other security certifications.
3. 8-10 years of experience in system security engineering, network security, application security, cloud security, or related fields.
4. Strong knowledge of security best practices, industry standards (NIST, ISO 27001), and security frameworks (CIS Critical Security Controls, Cloud Security Alliance).
5. Hands-on experience with security technologies (e.g., Palo Alto, Cisco firewalls, IDS/IPS, SIEM tools like Splunk, Sumo Logic, EDR platforms like Crowdstrike, and vulnerability scanning tools).
6. Expertise in risk assessment, penetration testing, incident response, and a solid understanding of networking protocols (TCP/IP, VLANs, VPNs, routing/switching).

This is an exciting opportunity to play a critical role in safeguarding the security posture of a leading hedge fund. If you have a passion for cybersecurity and a proven track record in security engineering.