Security Engineer

Job Summary

As a full-time remote Security Engineer specializing in Application Security & Technology Risk, the successful candidate will evaluate and protect the Firm's technology environment by assessing security risks associated with applications, SaaS platforms, and integrations, while providing practical, risk-based recommendations to various stakeholders.

Key responsibilities

• Perform technical security assessments of software applications, SaaS platforms, and other technologies proposed for use within the Firm
• Evaluate application architecture, permissions, data access, and security configurations to identify vulnerabilities and potential attack vectors
• Collaborate with cross-functional teams to recommend remediation strategies for identified security risks and gaps

Required qualifications

• At least three years of experience in cybersecurity, security engineering, application security, or related fields
• Strong understanding of common vulnerabilities, attack techniques, and software supply-chain risks
• Experience evaluating applications or SaaS platforms from a security perspective
• Working knowledge of modern identity and authentication technologies, including SSO and MFA
• Familiarity with security technologies such as vulnerability scanners and SIEM platforms