Senior Lead, Security Engineering and Operations

Description

The Senior Lead, Security Engineer is an experienced individual contributor role that engineers and operationalizes enterprise security platforms. It combines hands-on delivery with technical ownership of capabilities that must be reliable, auditable and scalable. You will join architecture discussions, plan implementations, support operations and troubleshoot complex issues, working with engineering, infrastructure, application and risk teams.

The company is a global wealth management, asset servicing, asset management and banking firm. It serves the world's most successful individuals, families, corporations and institutions.

Founded in 1889, the company is built on three principles: Service, Expertise and Integrity. It teaches these to its staff, called partners, and applies them with clients and communities worldwide.

With over 135 years in financial services and more than 24,000 partners, the company serves sophisticated clients using leading technology and strong service.

The company has a flexible, collaborative culture and a strong record of financial stability. Internal moves are encouraged, senior leaders are reachable, and the company is committed to an inclusive workplace and to the communities it serves.

Giving back is part of the company's history. Employees around the world volunteer their time and talent for community causes.

Responsibilities

• Shape platform engineering decisions and day-to-day security operating governance.
• Build and run security tools covering zero trust, SASE/SSE, network, vulnerability and exposure management, AI guardrails and SaaS.
• Create engineering patterns, implementation standards and runbooks that teams in every business unit can adopt consistently.
• Build maturity models and metrics that show assurance and compliance levels.
• Work with engineering, infrastructure and application teams on joint security initiatives.
• Engineer, coordinate and operate the following:
• Intrusion prevention across next-generation firewalls
• Vulnerability scanners and the unified vulnerability management (UVM) layer
• Enterprise SASE and SSE security platforms
• Secure web gateway, CASB and cloud access protection
• SaaS application protection and monitoring
• Secure remote access and internet traffic inspection
• Browser isolation and modern web threat prevention
• AI gateway controls that govern how users and applications use LLMs and AI services
• ServiceNow integrations for Vulnerability Response, ITSM and CMDB
• Drive platform health, upgrades, capacity, resilience, lifecycle work and vendor escalations across the stack.
• Define and publish metrics on coverage, control effectiveness, SLA adherence, tool health, control performance and measurable risk reduction.
• Support audits and regulatory exams (PCI-DSS, SOX, GLBA, OCC/FFIEC) by designing controls for strong evidence, traceability and repeatable operation.
• Write runbooks and executive-level documentation for engineering, operations, risk and audit teams.
• Assess new capabilities, proofs of concept and chances to rationalize tools, recommending based on risk reduction, operational fit, cost and control outcomes.

Requirements

• Typically 12+ years in IT, cybersecurity, cloud, infrastructure, network security or platform engineering, including hands-on work with enterprise-scale security platforms.
• Ability to act as a senior technical contributor, balancing security, reliability, usability and compliance while helping the team agree on technical decisions.
• Deep hands-on experience with at least one SSE or SASE platform: ZTNA, secure web gateway policy, segmentation, connector architecture and operating model design.
• Working knowledge of IPS and next-generation firewall platforms, including signature tuning.
• Solid networking grounding: TCP/IP, routing, DNS, TLS/PKI, proxies, tunneling (IPsec/GRE) and segmentation.
• Experience with vulnerability management tools.
• Familiarity with identity integration: SAML/OIDC, Entra ID and conditional access.
• Scripting and API skills in Python, PowerShell and REST/JSON.
• Experience connecting security tools to ServiceNow, SIEM platforms and enterprise reporting.
• Clear communication, including documenting technical decisions, answering audit questions and working with engineering, operations, risk and audit.
• Experience in a regulated setting covering control evidence, operational resilience, risk acceptance, issue management and responses to audit and regulator expectations.
• Exposure to AI and LLM security controls: AI gateways, prompt-injection defenses, OWASP Top 10 for LLM Applications and MITRE ATLAS.
• ServiceNow Vulnerability Response or USEM implementation experience.
• Low-code automation or Terraform/IaC experience.

Conditions

Pay range: $114,500 - 194,700 USD.

This range is the company's good faith estimate of base pay.

You must be authorized to work in the U.S. now and in the future without employment-based visa sponsorship.

The company will not sponsor U.S. work visas for this role, including H-1B, L-1, TN, O-1, E-3, H-1B1, F-1, J-1, OPT, CPT or any other employment-based visa.

Benefits

• Retirement benefits, including a 401k and a pension.
• Health and welfare cover: medical, dental, vision, spending accounts and disability.
• Paid time off, parental leave and caregiver leave.
• Life and accident insurance, plus other voluntary and well-being benefits.
• A discretionary bonus program that may include an equity component.