Job Title: Cybersecurity Engineer
Position Summary
We are seeking an experienced Cybersecurity Engineer to join our dedicated Crypto team within the Technology division. In this role, you will be responsible for implementing, managing, and automating the cryptographic infrastructure that secures the Firm’s most sensitive data, transactions, and critical assets.
As part of the Cybersecurity Engineering job family, you will develop and maintain robust secure systems, cryptographic services, and key management solutions to protect Firm assets and guarantee full compliance with global regulatory standards.
Key Responsibilities
- Cryptographic Infrastructure Management: Build, maintain, and support enterprise cryptographic infrastructure, including Hardware Security Modules (HSMs) and enterprise key management platforms.
- Key Lifecycle Governance: Execute and manage the end-to-end encryption key lifecycle - including key generation, distribution, rotation, archival, and destruction - in strict alignment with Firm security standards.
- Enterprise Integration: Integrate cryptographic services into enterprise applications and workflows using industry-standard security protocols such as KMIP and PKCS#11.
- Automation & Process Improvement: Drive automation initiatives using scripting to optimize key management workflows, certificate deployments, and operational processes.
- Risk & Compliance Collaboration: Partner closely with cybersecurity, risk, and compliance teams to enforce internal security controls and adhere to global financial regulatory requirements.
- System Observability & Maintenance: Monitor system health, performance, and operational integrity using observability platforms; troubleshoot and resolve complex technical issues related to cryptographic systems and secure vaults.
- Technical Documentation & Support: Maintain accurate technical documentation, create internal FAQs, and provide support to customer and development teams integrating with cryptographic platforms.
- Stakeholder Engagement: Contribute to complex security projects and communicate operational plans, status updates, and risk summaries to team members and division leadership.
Core Technical Skills:
- Cryptographic Lifecycle Management: Strong practical understanding of encryption key lifecycle processes (generation, rotation, archival, and destruction).
- HSM & KMS Platforms: Direct experience supporting enterprise cryptographic infrastructure and Key Management Systems (specifically Thales CipherTrust Manager and Luna HSMs).
- Cryptographic Protocols: Demonstrated experience integrating applications via KMIP and PKCS#11.
- Operating Systems: Solid proficiency in Linux or other UNIX-based operating environments.
- Automation & Scripting: hands-on experience using scripting languages (e.g., Python, PowerShell) to drive operational efficiency.
- Observability & Monitoring: Hands-on experience or working knowledge of monitoring and metrics platforms such as Prometheus and Grafana.
Professional & Analytical Capabilities:
- Experience Level: Minimum 2+ years of relevant experience in cybersecurity engineering, cryptography, or identity & key management domains.
- Risk & Governance Awareness: Sound understanding of regulatory frameworks, audit requirements, and risk management principles applicable to financial cryptographic infrastructure.
- Communication & Synthesis: Proven ability to analyze complex technical information, translate it into actionable execution plans, and present clear summaries to technical and non-technical stakeholders.
- Domain Knowledge: Strong grasp of financial services technology environments and discipline-specific security standards.
