Security Services Senior Engineer

• Identify changes needed in security architecture platform design integrations configurations and operational processes necessary to achieve technology and security organization goals taking into account operational impact and stakeholder needs.
• Configure troubleshoot optimize and maintain security platforms across enterprise cloud endpoint network identity and SaaS environments with a focus on reliable supportable service delivery.
• Perform monitoring periodic reporting health checks control reviews and follow-up activities to ensure security systems are operational effective resilient and aligned with applicable policies standards and compliance expectations.
• Analyze system performance alert quality coverage data ingestion and capacity trends; develop tuning recommendations that improve reliability reduce noise support capacity management and improve measurable security outcomes.
• Manage effective issue identification and resolution processes. Serve as a senior escalation point for security engineering and operations issues with a focus on clear communication root-cause determination timely remediation vendor accountability and quality outcomes.
• Perform capacity planning and develop KPIs/KRIs for assigned security platforms including availability coverage alert quality agent health ingestion quality vulnerability/exposure trends and service performance.
• Support security monitoring and protection of endpoints workloads identities networks cloud services SaaS applications and data transfer mechanisms in alignment with DFIN governance and compliance policies.
• Create maintain and improve documentation for security platforms architecture diagrams support processes standard operating procedures runbooks configuration standards and engineering decision records that help others understand operate and improve assigned services.
• Perform 24x7x365 advanced tier 1-3 support including troubleshooting off-hour maintenance activities problem resolution incident support and on-call rotation while ensuring all activities adhere to DFIN Change Management policy.
• Provide timely thoughtful communication during escalations incidents and maintenance activities including risks decisions ownership and next steps.
• Perform other related duties and participate in special projects as assigned.

• Conduct high-level and low-level designs for security infrastructure security tooling cloud security identity endpoint logging detection vulnerability/exposure management and automation projects.
• Partner with technology product infrastructure cloud application identity architecture compliance and operations teams to design secure practical and supportable solutions.
• Design and develop security solutions and security requirements based on business technology compliance and risk needs; make recommendations on security platform investments integrations and service improvements with clear rationale and practical implementation considerations.
• Evaluate new technologies develop proofs of concept document technical findings and recommend future strategy to leadership based on risk reduction operational fit scalability total cost of ownership integration value and long-term supportability.
• Influence security architecture standards security platform roadmaps and technical strategy through engineering expertise operational experience and evaluation of emerging technologies.
• Develop solutions to ensure security telemetry is collected normalized stored filtered analyzed and properly monitored/alerted across SIEM data lake cloud-native endpoint identity network and application sources.
• Engineer and maintain automation for repeatable security tasks including scripting API integrations deployment workflows configuration management platform health validation and metrics reporting.
• Act as the service owner for assigned security platforms ensuring lifecycle management operational health roadmap planning adoption supportability and continual service improvement.
• Use metrics lessons learned and stakeholder feedback to identify practical improvements that increase coverage reliability and security maturity over time.
• Develop and deliver cross-training activities for operations security engineering architecture and other technology teams to improve shared understanding and reduce operational dependency.
• Mentor and guide engineers through technical coaching knowledge sharing peer reviews and collaborative problem solving to strengthen team capability and effectiveness.
• Participate in and encourage a knowledge-sharing environment both within and outside the department.
• Develop and maintain strong working knowledge of internal security infrastructure operations platforms processes and devices.

• Minimum of 2 years working knowledge of a major scripting or automation language such as PowerShell Python Bash Perl or comparable tools.
• Minimum of 2 years working knowledge of network management security monitoring troubleshooting and observability tools.
• Working knowledge of Microsoft 365/O365 Visio G-suite/Google Workspace Lucidchart or comparable productivity and diagramming tools.
• Minimum of 2 years working knowledge of public cloud (Azure AWS) SaaS products private cloud or hybrid enterprise environments.
• Working knowledge of endpoint security identity security SIEM/logging vulnerability management cloud security and network security technologies.
• Demonstrated ability to document technical designs operational support procedures metrics risks decisions and executive-ready summaries.
• Excellent written and verbal communication skills including the ability to explain risks tradeoffs recommendations and progress clearly.
• Travel required (+/-5%).

• Minimum 5 to 7 years relevant work experience in security engineering security operations engineering infrastructure security cloud security identity security endpoint security network security or related technology roles.
• Experience serving as a technical escalation point platform owner or senior engineer responsible for implementation support stakeholder coordination and continuous improvement of enterprise security services is preferred.

• Bachelor's degree in related technical or business areas is preferred; equivalent relevant experience may be considered.
• CISSP CCSP CISM GIAC Microsoft AWS Azure Kubernetes networking cloud security or other relevant certification preferred.

What We Do

DFIN is a leading global risk and compliance solutions company. We provide domain expertise software and data analytics for every stage of our clients’ business and investment lifecycles. Markets fluctuate regulations evolve technology advances and through it all DFIN delivers confidence with the right solutions in moments that matter.

Why Work With Us

DFIN is shaping global markets and is an environment where you can bring your whole self to work and do your best work every day. We are a values-based culture in which you can build a rewarding career.

Gallery