Senior Security Engineer (VP)

Primary Responsibilities

• Lead threat intelligence and vulnerability management initiatives to identify, assess, prioritize, and mitigate cybersecurity risks across the enterprise.
• Manage the end-to-end threat intelligence lifecycle, including collection, analysis, enrichment, validation, dissemination, and operationalization of actionable intelligence.
• Monitor global cyber threats, threat actors, emerging attack vectors, indicators of compromise (IOCs), and zero-day vulnerabilities relevant to the organization.
• Produce threat assessments, security advisories, and executive-level reporting to support risk-based decision making and cybersecurity strategy.
• Conduct risk-based vulnerability assessments and oversee remediation efforts, ensuring alignment with established standards, SLAs, and risk priorities.
• Partner with Security Operations and Engineering teams to enhance threat detection, threat hunting, incident response support, and security monitoring capabilities.
• Design, implement, and optimize integrations between threat intelligence platforms, vulnerability management tools, SIEM, SOAR, and external intelligence feeds.
• Drive security automation and orchestration initiatives utilizing Python, PowerShell, APIs, and workflow automation technologies to improve operational effectiveness.
• Develop and maintain cybersecurity metrics, dashboards, and risk posture reporting to communicate risk exposure, remediation progress, and program maturity to stakeholders.
• Serve as a senior cybersecurity SME, providing guidance on enterprise security architecture, security technologies, security controls optimization, and cybersecurity best practices.

Key Qualifications

• Bachelor's degree in Information Technology, Cybersecurity, Computer Science, Engineering, or a related discipline.
• 8+ years of experience in cybersecurity engineering, threat intelligence, vulnerability management, security operations, or related information security functions.
• Deep understanding of cyber threat intelligence, vulnerability management operations, security analytics, and enterprise security programs.
• Hands-on experience with Threat Intelligence Platforms (TIPs), SIEM, SOAR, vulnerability scanning tools, security monitoring platforms, and threat intelligence feeds.
• Strong knowledge of MITRE ATT&CK, NIST Cybersecurity Framework (NIST CSF), OWASP Top 10, CVE management, and security frameworks and best practices.
• Experience managing vulnerability remediation programs, attack surface management initiatives, risk assessments, and remediation governance activities.
• Ability to communicate complex technical and security concepts to executive leadership, technical teams, and business stakeholders.
• Experience developing security automation and integrations using Python, PowerShell, APIs, or similar technologies.
• Proven ability to manage multiple priorities, work independently with minimal supervision, and thrive in a fast-paced environment.
• CISSP, CISM, or other relevant security certifications are highly preferred. Experience within financial services, banking, capital markets, asset management, insurance, or other highly regulated industries is strongly preferred.

This position is based in New York City and operates in a hybrid work environment. Candidates should be comfortable working onsite 2-3 days per week, collaborating closely with security, technology, and business teams while helping drive critical cybersecurity initiatives across the organization.