Top Fintech Cybersecurity Jobs in New York City, NY

Lead enterprise security engineering across DLP, zero-trust networks, endpoint protection, SaaS posture management, email security, and network defense. Design secure architectures, baseline configurations, automation, threat signaling, and risk mitigation strategies. Administer security tools, conduct incident response and threat detection, analyze logs, and support digital forensics. Partner with IT, infrastructure, risk, compliance, and engineering teams while mentoring staff and establishing cybersecurity best practices.

Leads and scales Capco’s cybersecurity and AI practice for financial services clients. Responsibilities include defining Cyber AI strategy, developing offerings and reference architectures, leading complex security engagements, building executive client relationships, driving business development, closing deals, and developing high-performing teams.

Drive application security by running SAST/SCA, threat modeling, vulnerability management, and remediation. Advise on secure architecture, train engineers, support pentests/bug bounties, and administer AWS Control Tower and IAM. Innovate with AI to improve AppSec tooling and practices.

Provides hands-on endpoint, mobile, network, and infrastructure security for executives, remote offices, and sensitive locations. Responsibilities include configuring devices and controls, conducting site security assessments, remediating gaps, troubleshooting security systems, coordinating with Physical Security and vendors, maintaining documentation and runbooks, supporting audits, and responding to urgent after-hours issues. Regular domestic and international travel is required.

Own and scale IT General Controls across NetSuite, Workday, Salesforce, and related enterprise applications. Lead access governance, segregation-of-duties processes, change management, audit readiness, evidence collection, and remediation. Partner with Internal Audit, External Audit, Security, Finance, and application owners on SOX compliance. Develop AI-native continuous controls monitoring, automated testing, anomaly detection, and governance for internal AI systems while modernizing the broader controls environment.

The Cyber Security Engineer Co-Op will support IEX's Information Security team, gaining hands-on experience in compliance, operational tasks, and security programs while contributing to security initiatives.

Lead and execute the firms cybersecurity and operational risk programs, including AI security strategy, incident response, vendor security, compliance (SEC/FINRA/SOC2), secure architecture, and day-to-day security operations. Partner with executives, oversee audits and certifications, and build security awareness across the organization while remaining hands-on with tooling, design reviews, and threat management.

Lead and scale security engineering: define strategy, hire and mentor team, manage IAM, cloud security and multi-tenant data isolation, run detection and incident response, own vulnerability management, support SOC2/PCI compliance, and secure AI systems.

Own application security for backend services, APIs, cloud infrastructure, and edge systems handling financial transactions. Responsibilities include validating red-team findings, assigning severity, hardening services, implementing WAF and rate-limiting defenses, creating automated security configuration checks, expanding pull-request security gates, reviewing architectures, managing attack-surface coverage, and evaluating security tools. The role also partners with engineers and Security Operations to drive effective remediation.

Lead global security investigations and incident response, serving as incident commander for major events and guiding containment, remediation, recovery, and postmortems. Manage and develop a technical response team, establish readiness practices, improve security tooling and telemetry, and drive detection and automation enhancements. Translate incident metrics and business impact into executive and board-level reporting while developing AI-enabled investigation workflows with appropriate safeguards.