Senior Security Engineer

FlexTrade Systems is a financial technology Software Company headquartered in Great Neck, New York. We are celebrating 26 years as an industry pioneer and a global leader in broker-neutral trading platforms for equities, foreign exchange, options, futures, and fixed income. FlexTrade has 500+ employees across 10+ offices in North America, Europe, and Asia, and a worldwide client base both from Buy Side and Sell Side business. It is an exciting time to join FlexTrade. Each line of business and region is at a different growth phase. Across its functional teams, FlexTrade is taking bold steps to transform its business and approach to positioning itself for the next growth phase. The Team:

As a Senior Security Engineer, you will be responsible for designing, implementing, and maintaining our organization's security infrastructure and systems. You will play a critical role in ensuring the confidentiality, integrity, and availability of our systems, networks, and data. You will collaborate closely with cross-functional teams to identify and mitigate security risks, develop and enforce security policies, and respond to security incidents. Additionally, you will lead security-related projects, mentor junior security engineers, and stay updated with the latest industry trends and emerging threats.

The Global Information Security team's mission is to ensure FlexTrade and Client's security globally and to ensure solutions implemented by FlexTraders are secure and fulfill FlexTrade's mission – Trade Your Best.

Requirements

Responsibilities:

• Develop and implement comprehensive security strategies, policies, and procedures to protect the organization's information assets.
• Design, deploy, and manage security solutions, including PAM/IAM, intrusion detection/prevention systems, endpoint protection, data loss prevention, encryption, and vulnerability management tools.
• Design and manage security in the cloud, including AWS Control Tower, Azure, and Microsoft O365.
• Conduct or coordinate regular security assessments, penetration tests, and vulnerability scans to identify and address potential vulnerabilities and weaknesses.
• Create policies and procedures regarding security logs and alerts
• Assist in investigating security breaches, incidents, and unauthorized access attempts, and develop and implement incident response plans.
• Collaborate with cross-functional teams to ensure security requirements are incorporated into the design and implementation of systems and applications.
• Stay abreast of emerging security threats, vulnerabilities, and industry best practices and provide recommendations for improving the organization's security posture.
• Lead security-related projects, including evaluating and implementing new security technologies and solutions.
• Mentor and guide junior security engineers, sharing knowledge and best practices.

Required Skills and Experience:

• A bachelor's degree in Computer Science, Information Security, or a related field. A master's degree is a plus.
• Professional certifications such as Certified Information Systems Security Professional (CISSP), Certified Ethical Hacker (CEH), or Certified Information Security Manager (CISM) are highly desirable.
• Proven experience (5+ years) in a security engineering role, focusing on designing and implementing security solutions and managing security infrastructure.
• Strong knowledge of network security principles, protocols, and technologies, including firewalls, intrusion detection/prevention systems, VPN, and network segmentation.
• Experience with vulnerability assessment tools, penetration testing methodologies, and security incident response.
• Proficiency in security technologies and tools such as SIEM (Security Information and Event Management), IDS/IPS (Intrusion Detection/Prevention System), antivirus, DLP (Data Loss Prevention), and encryption.
• Familiarity with cloud security concepts and technologies (e.g., AWS, Azure, O365) and experience securing cloud environments.
• Strong experience working with Privilege and Identity management solutions.
• Strong knowledge of Operating System security and system hardening concepts such as CIS Benchmarks.
• Solid understanding of industry standards and frameworks, such as ISO 27001, NIST Cybersecurity Framework, and PCI DSS.
• Knowledge of scripting and SOAR is a plus.
• Strong analytical and problem-solving skills, with the ability to assess risks and develop appropriate security controls.
• Excellent communication and interpersonal skills, with the ability to effectively communicate complex security concepts to technical and non-technical stakeholders.
• Ability to work independently, prioritize tasks, and manage multiple projects simultaneously.
• Strong leadership skills, with the ability to mentor and guide junior team members.

**FlexTrade Systems, Inc. does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an authorized agreement for a particular SOW (Statement of Work) in place is hired: such resumes are deemed the sole property of FlexTrade Systems, Inc.**

**FlexTrade Systems, Inc. is an equal opportunity employer and makes employment decisions without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability status, or any other status protected by law.**