Senior Security Engineer

Friedman Williams; New York (NY); On-site; USD 120,000 - 150,000; Full time

Job summary

Friedman Williams is seeking a Senior Security Engineer in New York to enhance enterprise cybersecurity infrastructure. This role emphasizes Microsoft security technologies and cloud security architecture, supporting AI-driven initiatives.

Candidates should have strong expertise in security frameworks, incident response, and risk management, along with a minimum of 5 years in cybersecurity engineering. A bachelor's degree in a related field and industry certifications are preferred.

Qualifications

• 5+ years of hands‑on information security or cybersecurity engineering experience.
• Strong expertise in Microsoft security technologies and cloud security architecture.
• Proven experience in SIEM monitoring and log analysis.

Responsibilities

• Design, implement, and enhance cybersecurity infrastructure.
• Lead strategy and design of AI and agentic security controls.
• Securely deploy AI-driven solutions in partnership with infrastructure teams.
• Design secure architectures for Azure, AWS, and Microsoft 365.
• Develop and manage identity security strategies.

Skills

Microsoft security technologies

Cloud security architecture

SIEM monitoring and log analysis

Networking fundamentals

Data Loss Prevention (DLP)

Education

Bachelor’s degree in Information Security or related field

Tools

Microsoft Defender Suite

Microsoft Sentinel

Microsoft Purview

Azure & Entra ID

AWS

DevSecOps tools

Job description

Senior Security Engineer New York New York

Job ID: 20935

Our client is seeking a Senior Security Engineer to design, implement, and enhance enterprise cybersecurity infrastructure across a hybrid environment. This role is heavily focused on Microsoft security technologies, cloud security architecture, and emerging AI security frameworks, supporting the organization’s continued adoption of cloud and AI-driven technologies.

This is an opportunity to work on cutting‑edge initiatives including AI Security, Agentic Security, Data Security Posture Management (DSPM), and enterprise cloud security strategy within a highly collaborative environment.

Key Responsibilities

AI & Emerging Security Technologies

• Lead the strategy, design, and implementation of AI and agentic security controls
• Partner with infrastructure, application, and AI teams to securely deploy AI-driven solutions
• Integrate DevSecOps, CSPM, and cloud-native security tooling into enterprise environments

Cloud Security & Architecture

• Design and maintain secure architectures across Azure, AWS, and Microsoft 365
• Secure and support IaaS, PaaS, and SaaS environments
• Implement cloud monitoring, logging, auditing, and alerting capabilities

Identity & Access Management

• Develop and manage identity security strategies leveraging Azure/Entra ID
• Enforce least‑privilege access controls and modern authentication standards
• Monitor authentication, authorization, and privileged access activity

Data Protection & Compliance

• Implement and manage Microsoft Purview and Microsoft 365 security policies
• Monitor and mitigate data loss and data leakage risks across cloud and on‑premises environments

Incident Response & Security Operations

• Lead investigations and coordinate responses to cybersecurity incidents
• Enhance real‑time monitoring, detection, and logging capabilities
• Collaborate with IT, legal, and compliance teams on reporting and remediation efforts

Security Engineering & Risk Management

• Design and manage security infrastructure protecting enterprise systems and networks
• Conduct vulnerability assessments, security reviews, and risk evaluations
• Perform security assessments for new technologies and enterprise initiatives

Required Experience & Skills

• 5+ years of hands‑on information security or cybersecurity engineering experience

Strong expertise in:

• Microsoft security technologies
• Cloud security architecture
• SIEM monitoring and log analysis
• Networking fundamentals including firewalls, routing, NAT, and proxies
• Data Loss Prevention (DLP)

Key Technologies

• Microsoft Defender Suite (Endpoint, Identity, Cloud Apps, O365)
• Microsoft Sentinel (SIEM)
• Microsoft Purview
• Azure & Entra ID
• AWS
• DevSecOps and cloud security tooling

Preferred Qualifications

• Bachelor’s degree in Information Security, Information Systems, or related field
• Industry certifications such as CISSP, CISM, or Microsoft Security certifications preferred
• Additional certifications from Palo Alto, Cisco, Splunk, or similar vendors are a plus