Software Guidance & Assistance, Inc., (SGA), is searching for a Cyber Security Engineer / Analyst for a full-time position with one of our premier financial services clients in New York, NY Hybrid schedule: 2-3 days/week in office.
Responsibilities:
- Define and oversee cloud security best practice adherence across AWS (required) and Azure (preferred) environments
- Leverage native cloud security capabilities and CSPM tools to monitor posture and enforce policies
- Identify cloud security risks and partner cross-functionally to drive remediation and continuous improvement
- Own and drive resolution of security issues escalated from MDR, vulnerability management, and audit findings
- Ensure issues are driven to closure internally, coordinating across teams as needed
- Identify control gaps and implement improvements to overall security effectiveness
- Plan and coordinate security integration across legacy and acquired environments
- Align and unify security tooling, controls, telemetry, and processes
- Support Day 1 readiness (visibility and baseline coverage) and lead Day 2 consolidation efforts
- Assess and prioritize vulnerabilities based on exploitability, business impact, and environmental context
- Drive remediation across infrastructure, application, and cloud teams
- Apply risk-based decision making to balance competing priorities across a complex environment
- Partner with IT, cloud, engineering, and leadership teams to drive technical work that reduces risk while enabling business objectives
- Influence stakeholders to take action on security risks and remediation efforts
- Communicate risk clearly and align solutions with business priorities
- Support implementation and refinement of zero trust and segmentation strategies
Required Skills:
- 1-3+ years of experience in Cyber Security Engineering / Security Operations (ownership-focused, not SOC-only)
- Strong AWS cloud security expertise (top priority) - IAM, configurations, native controls, and cloud risk management
- Experience defining or enforcing cloud security best practices and standards
- Experience working in environments with MDR/EDR tooling, including handling escalations and driving remediation
- Experience with CSPM tools and/or native cloud security services
- Proven ability to drive security issues to resolution across multiple teams
- Experience working in complex, multi-environment environments (M&A or integration experience preferred)
- Strong understanding of risk prioritization and decision making in dynamic environments
- Ability to balance business objectives with security risk
- Strong cross-functional collaboration skills with engineering, infrastructure, and business teams
- Excellent communication and stakeholder management skills (critical for success)
- Financial Services or other highly regulated industry experience
- Ability to operate effectively in fast-paced, ambiguous environments
Preferred Skills:
- Experience with tools such as Wiz, Okta, Microsoft Purview DLP, Cyberhaven, Expel, Zero Networks
- Prior experience in financial services or regulated environments
- Experience supporting M&A integration / transformation initiatives
- Exposure to zero trust architecture design and implementation
- Experience integrating security tools and processes across multiple environments
- Investment Management, Asset Management, or Hedge Fund experience
Education & Certifications (Nice to Have):
- Bachelor's degree in Computer Science, Cybersecurity, Information Security, Information Technology, or related technical field
- Advanced degree (Master's) in Cybersecurity or Information Assurance
- CISSP, CISM, or CISA
- AWS Certified Security Specialty or AWS Solutions Architect
- Azure Security Engineer Associate
- GIAC certifications (GCIA, GCIH, etc.)
Company's Technology Environment: CrowdStrike, Microsoft Defender, Microsoft Sentinel, Sumo Logic, AWS, Azure, Wiz, Okta, Tenable, Microsoft Purview DLP, Cyberhaven, Expel, Zero Networks
By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
Never miss an opportunity! Create an alert based on the job you applied for.