Senior Information Security Engineer

eMoney Advisor provides a web-based wealth management system and resources for financial professionals. The Senior Information Security Engineer manages the operational availability, supportability, and sustainability of a 24x7x365 security infrastructure while protecting the confidentiality, integrity, and availability of company data. The role focuses on security operations, risk analysis, cloud security, incident response, compliance, and security technology implementation.

Responsibilities:

• Make recommendations to management on enhancements to existing and new security hardware, software or related tools. Assist in evaluating, planning, configuration, and implementation of new/existing security applications/tools
• Perform risk analysis for corporate functional and technical areas relevant to data security
• Configure, implement, monitor, and support security software/systems that will help ensure compliance with regulatory, industry, and corporate policies and procedures. This includes but is not limited to firewalls, VPNs, IDS/IPS, DLP, log management/correlation, EDR/XDR, web content filtering, email security, identity and access management, vulnerability management, etc
• Ensure security best practices are identified and integrated into all facets of the project including network, system designs/configuration, and implementations
• Identify and recommend potential areas where existing data security policies and procedures require change, or where a supplement is required to mitigate key security risks. Partner with various business units to enhance security policies/procedures
• Facilitate penetration testing and audit participation, where applicable
• Create and maintain data security documentation, policies and procedures
• Recommend and enforce technical service level standards and procedures for data security
• Establish alternative security measures to allow for business continuity while protecting the company's assets
• Assists in the identification, response, investigation, and remediation of potential breaches of and issues surrounding data security
• Responsible for monitoring, detection, investigation, and incident response capabilities for AI environments, including security MCP server integrations and data loss prevention within AI prompts and model interactions
• Participates in the execution of programs for user awareness, compliance monitoring, and security compliance; maintaining information security devices and software; monitoring compliance procedures; and resolving security policy issues
• Manage relationships with 3rd party providers of security monitoring and tools to ensure assets are being protected
• Responsible for providing support during off hours for information security related issues
• Track data security issues to closure in a timely manner by partnering with business units, communicating solutions, and verifying remediation
• All other duties as assigned

Requirements:

• • Bachelor's degree in Management Information Systems, or a related discipline, or equivalent work experience required
• • Security certification such as CISSP, CCSE, AWS, or GIAC certifications
• • 6+ years of information security experience including project management and security concepts for technology systems
• • Deep knowledge of network security (Check Point firewalls, VPNs, IDS/IPS, encryption)
• • Experience with AWS cloud security and cloud-native security tools
• • Strong analytical, prioritization, interpersonal, problem-solving, presentation, budgeting, project management (from conception to completion), & planning skills
• • Strong verbal and written communication skills
• • Demonstrated collaborative skills and ability to work well within a team
• • Ability to work with and influence peers and senior management
• • Ability to work in a fast-paced and deadline-oriented environment
• • Self-motivated with critical attention to detail, deadlines and reporting