Senior Security Engineer

Koitecc Solutions; New York, Northern (NY, KY); On-site; USD 140,000 - 210,000; Full time

Job summary

Koitecc Solutions seeks a Senior Security Engineer for their New York office to drive cybersecurity initiatives across monitoring, response, detection, and vulnerability programs.

You will partner with Technology teams to protect systems and networks from evolving threats, while shaping security posture and incident readiness in a fast-paced hedge fund environment.

Qualifications

• Bachelor's degree in CS/IT or related field.
• CISSP, CISM, CEH or similar certifications preferred.
• 8–10 years in security engineering, networking, cloud security, or related areas.

Responsibilities

• Lead vulnerability management, scanning, remediation and reporting.
• Manage EDR platform: investigations, policy configurations, agent updates.
• Audit EDR and vulnerability scanning effectiveness periodically.
• Monitor SIEM and cloud environments; enhance Splunk alerts and dashboards.
• Lead incident response, communicate findings, and recommend mitigations.

Skills

Security monitoring

Incident response

Threat detection

Vulnerability management

Networking fundamentals

Security frameworks

Cloud security

EDR tools

SIEM experience

Risk assessment

Education

Bachelor's degree

Security certifications (CISSP/CISM/CEH)

Tools

Splunk

Sumo Logic

CrowdStrike

Palo Alto

Cisco firewalls

IDS/IPS

Job description

Our hedge fund client is seeking an experienced Senior Security Engineer to join their New York office. In this role, you will lead the firm's cybersecurity efforts, focusing on security monitoring, incident response, threat detection, and vulnerability management. Working closely with cross-functional teams in the Technology department, you will ensure that systems and networks are protected against emerging cybersecurity threats.

Key Responsibilities

1. Administer the vulnerability management platform, overseeing configurations, vulnerability scanning, remediation, and reporting.
2. Manage the EDR platform, handling event investigations, alert/report design, policy configurations, and endpoint agent updates.
3. Conduct regular audits to ensure the effectiveness of EDR and vulnerability scanning applications.
4. Monitor SIEM and cloud environments for potential security incidents and enhance Splunk alerts, reports, and dashboards.
5. Lead incident response efforts, minimizing business impact, communicating findings, and making mitigation and hardening recommendations.

Qualifications

1. Bachelor's degree in Computer Science, Information Technology, or a related field.
2. Relevant professional certifications such as CISSP, CISM, CEH, or other security certifications.
3. 8-10 years of experience in system security engineering, network security, application security, cloud security, or related fields.
4. Strong knowledge of security best practices, industry standards (NIST, ISO 27001), and security frameworks (CIS Critical Security Controls, Cloud Security Alliance).
5. Hands-on experience with security technologies (e.g., Palo Alto, Cisco firewalls, IDS/IPS, SIEM tools like Splunk, Sumo Logic, EDR platforms like Crowdstrike, and vulnerability scanning tools).
6. Expertise in risk assessment, penetration testing, incident response, and a solid understanding of networking protocols (TCP/IP, VLANs, VPNs, routing/switching).

This is an exciting opportunity to play a critical role in safeguarding the security posture of a leading hedge fund. If you have a passion for cybersecurity and a proven track record in security engineering, we encourage you to apply.