Senior Security Engineer

Rockefeller Capital Management
New York, NY, United States
about 2 months ago

Role details

Contract type
Permanent contract
Employment type
Full-time (> 32 hours)
Experience level
Expert
Experience required
8 years minimum
Compensation
$175,000.0 - $200,000.0
Working hours
Regular working hours
Job source

Tech stack

Microsoft Windows Artificial Intelligence Amazon Web Services Microsoft Azure Bash Shell Unix Cloud Computing Cloud Computing Security Cyber Security Continuous Integration Linux Distributed Systems
+17 more
Github Identity and Access Management Python (Programming Language) OAuth OpenID Windows PowerShell Cloud Services Security Information and Event Management Software Engineering Software Vulnerability Management Cloud Platform System Software Security Multi-Cloud Cyber Threat Analysis Terraform Serverless Computing Security Orchestration, Automation & Response

Job description

The Security Engineer will architect, implement, and operate secure solutions across cloud, data, application, AI, and identity domains. This role will drive engineering excellence, leveraging deep technical expertise to safeguard distributed systems, public cloud infrastructure, and sensitive data. This role is hands-on, focused on building, automating, and scaling security controls that enable business innovation while minimizing risk. Responsibilities:

  • Design, build, and maintain secure cloud environments, ensuring robust protection for applications, data, and AI workloads.
  • Engineer and automate security controls for identity & access management, data protection, and application security across hybrid and multi-cloud platforms.
  • Develop and integrate security automation into CI/CD pipelines, infrastructure-as-code, and cloud-native services.
  • Implement and optimize detection, response, and monitoring capabilities using SIEM, SOAR, and threat intelligence platforms.
  • Collaborate with engineering, architecture, and product teams to embed security into software development, cloud operations, and AI/ML initiatives.
  • Lead technical investigations, incident response, and remediation efforts for cloud, data, and application security events.
  • Continuously assess emerging threats, vulnerabilities, and regulatory changes; adapt controls and processes to maintain resilience and compliance.
  • Document and communicate technical risks, solutions, and best practices to technical and non-technical stakeholders.

Requirements

Do you have experience in Threat intelligence?, * 8-15 years of fundamental engineering experience in security, systems, and software

  • Deep knowledge of networking, operating systems (Windows, Linux, Unix), and distributed/cloud architectures
  • Expertise in identity & access management (OAuth, OpenID), encryption, and data protection controls
  • Experience with application security, vulnerability management, and secure software development lifecycle
  • Knowledge of security frameworks (NIST, MITRE) and cloud security standards (CSA, CIS)
  • Experience with AI/ML security, cloud-native data protection, and automation of security operations
  • Familiarity with security monitoring, incident response, and threat intelligence in cloud environments

Skills:

  • Hands-on experience with public cloud infrastructure and security (Azure preferred; AWS/GCP a plus)
  • Proficiency in scripting and automation (Python, PowerShell, Bash, etc.)
  • Proficiency in security automation tools, CI/CD, infrastructure-as-code (Terraform, GitHub)
  • Ability to communicate complex technical concepts clearly and collaborate across teams
  • Track record of engineering excellence, integrity, and continuous learning

Benefits & conditions

Pulled from the full job description

  • Health insurance
  • Retirement plan, The anticipated base salary range for this role is $175,000 to $200,000. Base salary for the role will depend on several factors, including a candidate’s qualifications, skills, competencies, and experience, and may fall outside of the range shown. In addition, this role may be eligible for a discretionary bonus. Rockefeller Capital Management offers a comprehensive benefit package including health coverage, vacation time, paid leave, retirement plan, and more. Visit careers.rockco.com to learn more about additional opportunities and benefits offerings. Disclosure: Rockefeller & Co. LLC, Rockefeller Financial LLC, Rockefeller Trust Company, N.A., The Rockefeller Trust Company (Delaware), Rockefeller Financial Services, Inc. and all other subsidiaries of Rockefeller Capital Management L.P. (individually and collectively, ā€œRockefellerā€) is an equal opportunity employer and does not discriminate on the basis of race, religion, sex, gender, sexual orientation, gender identity or expression, national origin, citizenship, age, military or veteran status, marital or partnership status, caregiver status, legally recognized disability, or any other basis protected by applicable federal, state or local law (ā€œprotected characteristicsā€). Rockefeller Capital Management participates in the E-Verify program in certain locations, as required by law.

About the company

Rockefeller Capital Management was established in 2018 as a leading independent financial advisory services firm. Originally founded in 1882 as the family office of John D. Rockefeller, the Firm has evolved to offer strategic advice to ultra- and high-net-worth individuals and families, institutions, and corporations from offices in 33 markets throughout the United States, as well as an office in London. The Firm oversees $212 billion in client assets as of April 30, 2026.

Apply for this position

This job is hosted externally. Click below to view the full posting and apply.

Apply on indeed.com

Good distractions

Talks and stories from around this role — technically off-topic, practically not.

2:03 min

Microsoft integrating native Unix coreutils into Windows environments

Chris Heilmann +2 Ā· LIVE

2:49 min

Adopting OAuth best practices and removing outdated grants

Alexander Schwartz Alexander Schwartz Ā· WWC Europe 2026

52 sec

Running persistent Linux environments directly on Windows

Ben Breard Ben Breard Ā· WWC 2025

3:22 min

Transitioning from software engineering to security roles

Anna Oliveira Ā· Coffee With Developers

2:04 min

Defining timestamps and the international standard format

Denny Biasiolli Denny Biasiolli Ā· Europe 2026 Virtual

4:01 min

Finding personal fulfillment in the cybersecurity industry

LIVE

Videos

See all

Related articles

See all