Senior Information Security Engineer
The Role
Are you excited by collaborating across disciplines and leading strategic
security initiatives? Do you thrive on solving complex problems and driving
impactful results in a fast-paced environment? How would you help build the
future of security at CTC and empower our teams to innovate with confidence?
If these challenges energize you, we encourage you to apply and join us in
building the next generation of secure solutions.
As a Senior Information Security Engineer, you will work closely with a variety of tech teams to enhance and improve security and risk posture at CTC, enabling the business to move rapidly, securely, and with greater agility. You will have the opportunity to take ownership of large parts of the security program at a global organization and define the end-to-end direction.
Qualifications
- Hands-on experience in application security, network security, and cloud security
- Experience securing applications in either financial services/trading environments or technology sector organizations
- Proven experience integrating security into the software development lifecycle (SSDLC) and applying DevSecOps principles
- In-depth technical knowledge of and experience with one or more on-prem and cloud infrastructure technologies such as networking, Windows, Linux, Active Directory, containerization and virtualization, PKI, etc.
- Experience with identity-centric security practices such as IAM, Key Management / Certificate Management, or Zero-Trust solutions
- Experience administering and architecting core security technologies, such as vulnerability management tools, IAM, MFA, SAML, and orchestration/automation tools
- Understanding of sophisticated cyber threats, defense strategies, and conducting systems vulnerability assessments
- Proficiency in dynamic programming languages such as Python, or similar
- Strong interpersonal and communications skills, both written and verbal, enabling you to collaborate cross-functionally with IT, legal, compliance, and executive teams to influence security decisions and articulate complex security concepts to non-technical team members
Nice to Haves
- Familiarity with container-based technologies such as Docker and Kubernetes
- Knowledge of VPN, secure remote access technology, Citrix, and network segmentation techniques
- Proficiency with cloud platforms Azure, AWS, GCP, or similar
- Background in consulting and/or experience with project management
- Knowledge of compliance and regulatory standards such as NIST and/or other regulatory standards
- Relevant security certifications such as CISSP, CISM, CISA, or other industry-specific credentials