Senior Security Engineer
We are seeking a subject matter expert with direct experience in a wide range of security technologies, tools, and methodologies. This role is suited for an experienced Windows Engineer with proven understanding in enterprise security and will focus on building toolsets and processes to support the Information Security Program (ISP). The team fosters a collaborative environment and is building a best-in-class program to partner with the business to protect the Firm's information and computer systems. Millennium is a complex and robust technical environment and securing the Firm from external and internal threats is a top priority.
Principal Responsibilities
- Provide a high level of security consultancy and engineering support for Windows / Active Directory / Azure security solutions including analysis and development of Windows security solutions.
- Strong understanding of modern authentication protocols, e.g., OIDC / OAUTH 2.
- Contribute to the vision, strategy, and drive design and implementation for authentication platforms both on premises and in the cloud.
- Provide security consultancy and engineering support for SAML, OIDC and Kerberos authentication across different Identity providers, including analysis and development of SSO, PKI, and other authentication solutions.
- Able to demonstrate clear understanding of current risks and threats related to Identity Management at technical and managerial levels.
- Actively monitor new and emerging security and privacy related technologies, trends, issues, and solutions and assess their applicability to key business initiatives and strategies.
- Participate in Information Security Incident Response activities for the Firm's environment.
- Liaison with key stakeholders to create and enforce policy including Technology organization, Trading units, Legal, Internal Audit, and Compliance.
- Provide support to Security and other technical operations staff to ensure smooth turnover from Engineering to Production - and provide mentoring to junior level security professionals.
- Develop and maintain documentation of all Security products including specific tools, technologies, and processes.
Qualifications / Skills Required
Bachelor's degree in computer science or engineering preferred.7 + years' experience working in a technical role with a minimum of 2 + years' experience focusing on information security in the financial industry (preferred).Excellent understanding and experience of engineering Microsoft security solutions - including desktop and server operating systems, EntraID, Active Directory, Group Policy, Desired Configuration State, DNS, Messaging.Ability to understand code in C# / .NET and / or Python and strong scripting experience in PowerShell.Experience managing IaaS, SaaS solutions and services using CI / CD pipelines. Jenkins, Terraform experience is a strong plus.Solid understanding of SAML, OIDC and Kerberos authentication and related technology controls and best practices.Experience with Office 365 security controls including usage of Azure Active Directory, Conditional Access, o365 logging APIs, Microsoft CAS, and Microsoft Authenticator.Understanding and experience with implementing Data Loss Prevention (DLP) solutions, policies, and technologies.Understanding of Azure Information Protection (AIP) and its components, including labeling, classification, and encryption.Ability to develop and implement strategies to ensure compliance with data protection regulations, such as GDPR or HIPAA, utilizing DLP and AIP solutions.Strong knowledge and experience in a variety of security technologies including : EDR, SIEM, Vulnerability Management is a plus.Relevant security certification (CISSP, GCIA, CISM, etc.) and / or product certifications (PingFederate, Azure, Windows, AD etc.) a plus.The estimated base salary range for this position is $175,000 to $250,000, which is specific to New York and may change in the future. Millennium pays a total compensation package which includes a base salary, discretionary performance bonus, and a comprehensive benefits package. When finalizing an offer, we take into consideration an individual's experience level and the qualifications they bring to the role to formulate a competitive total compensation package.