Top Financial Services Cybersecurity Jobs in New York City, NY

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

As a Security Engineer, you'll embed security in applications, lead assessments, partner with teams for remediation, and drive security improvements.

Design, implement, and maintain secure networking across hybrid and multi-cloud (AWS/Azure/GCP). Build secure architectures for containerized applications, apply segmentation and zero-trust, configure cloud-native network controls, deploy IDS/IPS and monitoring, investigate incidents, remediate vulnerabilities, and automate security policy enforcement using IaC, CI/CD, and Python scripting. Mentor engineers and influence platform security strategy.

Triage and investigate insider threat alerts using SIEM, UBA, DLP, and endpoint detection; collect evidence, conduct interviews, coordinate with Legal/HR, produce investigative reports, and recommend mitigations and detection improvements.

Lead end-to-end insider threat investigations, triage alerts from SIEM/UBA/DLP/endpoint signals, collect evidence and conduct interviews, produce decision-ready briefs and risk assessments, drive detection and automation improvements, and partner with Legal, HR, and business teams to reduce insider risk at scale.

Lead Coinbase's global IT and security audit program, delivering complex cross-functional audits across cloud, infrastructure, cybersecurity, IAM, data protection, and third-party risk. Manage and develop a global audit team, partner with first- and second-line stakeholders to drive integrated assurance, and report executive-level findings to senior leadership and the Audit Committee. Modernize audit execution through data analytics, automation, and generative AI to enable continuous monitoring and automated evidence retrieval.

The CISO will develop and manage the Bank's information security programs, ensuring compliance and protecting customer data while mitigating risks. They will also lead a security team, oversee third-party risk, and promote a culture of security awareness across the organization.

Lead architecture, integration, installation, upgrade, and enterprise implementation of Privileged Access Management tools (CyberArk, Entra, BeyondTrust). Design and code complex software solutions, align business strategy with technology, provide technical guidance, and lead problem-solving and documentation for PAM initiatives.

Own and architect Forward's security technology stack across AppSec, SecOps, and GRC. Design integrations with Engineering/IT, lead tool evaluations and PoCs, automate controls with infrastructure-as-code and detection-as-code, build centralized logging/SIEM and identity governance, align architecture to security frameworks, mentor security engineers, and support incident response and remediation.

Senior security engineer responsible for developing automation and tooling, building and deploying security solutions, conducting incident response and proactive threat hunting, supporting investigations through data analysis, and advising development teams. Must document solutions, participate in agile teams, mentor juniors, and continuously research evolving security threats.

Lead and build the DevSecOps function: implement SOC 2 controls, automate compliance and evidence pipelines, own cloud security posture, CI/CD security gates, vulnerability management, and AI-assisted auto-remediation to embed security as code across the developer lifecycle.

Lead global technology and cybersecurity internal audit function: design risk‑based audit plans, execute IT/cyber/data audits (including third‑party work), assess cloud, AI, and resilience controls, ensure regulatory compliance, present findings to executives and audit committee, and lead and develop audit teams across geographies.