Senior Cybersecurity Operations Engineer

The position duties are as follows: Lead the strategic design and implementation of advanced cybersecurity architecture to proactively defend against complex threats and emerging attack vectors. Day-to-day job duties include:

• Architect the development of sophisticated security systems and frameworks in OCaml, driving technical decisions that establish the foundation for the organization’s security posture and ensuring scalable, resilient protection across all critical infrastructure;
• Provide technical leadership in designing cutting-edge cybersecurity solutions, mentoring junior team members and establishing engineering best practices that enable proactive threat identification and rapid incident containment across complex distributed systems;
• Drive cross-functional security strategy by partnering with stakeholders to assess risks, establish security governance frameworks, and lead the design of comprehensive cybersecurity solutions that align with business objectives; and
• Spearhead operational efficiency initiatives by designing automated security orchestration platforms and leading the transformation of manual processes into self-healing security systems that scale with organizational growth.

The position requires five (5) years of progressively responsible experience as a cybersecurity engineer or similar occupation at a financial services or technology firm. Experience must include:

• Five (5) years of experience responding to cybersecurity incidents in a high-stakes, time-sensitive environment where downtime directly impacts revenue, including experience with EDR tools and SIEM platforms for threat investigation and triage;
• Two (2) years of experience contributing to security tool development in OCaml - including incident response automation, threat detection, and security orchestration - with hands-on experience designing, implementing, and maintaining alerting and monitoring solutions using Elasticsearch and ElastAlert;
• Five (5) years of experience responding to cybersecurity threats targeting financial institutions, including phishing/credential theft, business email compromise (BEC), ransomware, and supply chain attacks, impersonation, and insider threat; and
• Five (5) years of experience programming on the Linux platform, including shell scripting, Python, and network security monitoring tools.
• All technical requirements for this role may be subject to employer conducted testing to assess minimum proficiency.

Part time telecommuting may be permitted with manager approval.