Lead Information Security Engineer

About This Role

Leading the design, implementation, and continuous improvement of security controls is the core of this role, protecting the firm's networks, applications, endpoints, cloud environments, and data from evolving cyber threats. This position serves as a technical authority on security architecture, partnering with other Information Services teams to evaluate solutions, identify security risks, and ensure new technologies are securely designed and deployed from the ground up. The Lead Information Security Engineer provides technical leadership for key security platforms, resolves complex security challenges, and drives the continuous maturation of the firm's overall security architecture, capabilities, and risk management practices.

Responsibilities

• Design, engineer, and implement secure network solutions, cloud environments (Azure), and application security controls
• Lead security architecture reviews for new technologies, applications, infrastructure, and cloud services; identify security risks and design gaps and provide technical recommendations to ensure solutions align with the firm’s security standards
• Secure Azure resources and IaaS solutions to ensure new deployments meet security standards
• Manage and onboard SIEM log sources, ensuring security-relevant logs are available and properly configured for use by the SOC team
• Design, implement, and optimize data loss prevention (DLP) policies and secure web gateway (SWG) controls to protect sensitive data
• Develop and maintain security standards, technical controls, and configuration guidelines for infrastructure, cloud, applications, and security technologies
• Evaluate vulnerabilities and security findings, assess risk and business impact, and collaborate with technical teams to develop and implement appropriate remediation strategies
• Provide engineering support during security incidents, including investigation, containment, remediation, and implementation of preventative controls
• Evaluate security technologies, vendors, and solutions; participate in proof-of-concept activities and provide technical recommendations for security-related technology investments
• Secure infrastructure and server environments, including virtual environments for Windows and Linux servers
• Support and advance the organization’s zero trust network access (ZTNA) solution
• Support and maintain certificate lifecycle management processes
• Assist with securing and maintaining VMware environments
• Contribute to identity and access management initiatives, including Azure Entra, LDAP, and SSO integrations
• Partner with networking teams on networking security matters and network security architecture
• Evaluate the security and privacy implications of AI tools and technologies and support the secure adoption of AI across the firm