Security Engineer - Cybersecurity Focus

- Oversee perimeter security by managing Cloudflare WAF to protect internally hosted services and APIs, designing and maintaining custom firewall rules and rate-limiting policies. - Provide security oversight and hardening for internal services hosted in AWS, ensuring strict environment isolation and utilizing AWS security tools. - Regularly analyze logs from Cloudflare and AWS to identify threats, reduce false positives, and enhance edge security performance. - Conduct routine vulnerability testing on internal systems and AWS-hosted instances, managing the patch remediation process in collaboration with engineering teams. - Act as the primary custodian of the SIEM platform, creating and refining detection logic to unify security insights from various sources. - Maintain and update internal security policies to align with CFTC regulatory requirements. - Lead the security assessments of third-party vendors, performing risk evaluations and reviewing security audits. - Manage security controls and compile technical documentation for SOC 2 Type 2 audits and annual regulatory reviews. - Oversee the Okta identity management system, managing SSO integrations and automated workflows. - Deploy and manage endpoint protection (SentinelOne) and email security measures, including proactive threat hunting. - Administer corporate IT environments such as Google Workspace and Slack, ensuring secure operations and compliance with data security protocols.