Cyber Security Engineering Senior Associate

Being a member of CISO team, the Cyber Integration & Orchestration Engineering (CIOE) team is responsible for designing, implementing, and optimizing cybersecurity platforms, integrations, and automation capabilities that strengthen DTCC’s cyber defense program. As a Senior Associate, you will play a key role in enhancing security operations through orchestration, threat response automation, platform integration, and security engineering initiatives.

You will collaborate with Cyber Observability, Detection Engineering, Incident Response, Infrastructure, Cloud, and platform teams to deliver scalable security solutions that improve operational efficiency, increase visibility across the enterprise, and accelerate incident detection and response capabilities.

Your Primary Responsibilities:

• Design, develop, and maintain integrations between security platforms, including SIEM, SOAR, EDR, IAM, Vulnerability Management, Network Security, Cloud Security, and Threat Intelligence solutions.
• Develop and support automated incident response playbooks and workflows to improve detection, triage, investigation, and containment activities.
• Engineer, implement, and maintain security orchestration capabilities across enterprise security tools and technologies.
• Configure, optimize, and troubleshoot security platforms and integrations to ensure reliability, performance, and operational effectiveness.
• Collaborate with Cyber Detection Engineering teams to enhance security use cases, alert enrichment, and response automation.
• Integrate security telemetry, logs, and threat intelligence data sources to improve visibility and detection coverage.
• Partner with infrastructure, cloud, and application teams to onboard new systems and ensure adherence to cybersecurity standards and monitoring requirements.
• Support the implementation and administration of SOAR, SIEM, and security analytics solutions.
• Develop APIs, scripts, and automation solutions using technologies such as Python, PowerShell, REST APIs, and cloud-native services.
• Conduct testing, validation, and tuning of automated workflows and security controls to ensure expected outcomes.
• Create and maintain technical documentation, operational procedures, playbooks, and architecture diagrams.
• Participate in cybersecurity projects, technology evaluations, proof-of-concepts, and production deployments.
• Support cyber resiliency initiatives through automation, integration, monitoring, and continuous improvement activities.
• Assist during security incidents by providing engineering support, automation enhancements, and rapid integration of new response capabilities.

• Bachelor’s degree in computer science, Cybersecurity, Information Technology, Engineering, or a related discipline.
• 5 to 8 years of experience in cybersecurity engineering, security operations, security automation, or related technical disciplines.

Talents Needed for Success:

• Experience administering or integrating security platforms such as:
• Google SecOps / Chronicle SIEM & SOAR
• Microsoft Sentinel
• Abnormal AI Email Security
• ExtraHop
• ServiceNow
• Cloud security platforms (AWS, Azure, GCP)
• Experience developing automation using scripting languages such as Python, PowerShell, or Bash.
• Understanding of SIEM, SOAR, Threat Intelligence, Vulnerability Management, Endpoint Security, and Network Security technologies.
• Experience working with APIs, data integrations, web services, and automation frameworks.
• Knowledge of incident response methodologies and cybersecurity operations processes
• Strong analytical and problem-solving skills.
• Excellent communication and stakeholder management capabilities.
• Ability to manage multiple priorities and work effectively in a fast-paced environment.
• Strong collaboration skills and ability to partner with cross-functional teams.
• Self-motivated with a continuous learning mindset.
• Ability to identify opportunities for operational improvement and automation.
• Demonstrated ability to translate business and security requirements into scalable technical solutions.
• Strong documentation and presentation skills.
• Passion for cybersecurity, innovation, and operational excellence.

• Competitive compensation, including base pay and annual incentive
• Comprehensive health and life insurance and well-being benefits, based on location
• Pension / Retirement benefits
• Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being.
• DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee).

Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve.

The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance.