Information Security Engineer III
Tower Research CapitalAbout the Role
Tower Research Capital is seeking an Information Security Engineer III to develop and implement automated security systems while managing enterprise-level security infrastructure. This role involves designing and maintaining security infrastructure (Hashicorp Vault, IAM, SIEM, EDR), conducting threat hunting and vulnerability assessments, and consulting on security remediation strategies. You will participate in attack simulation exercises, manage incident response procedures, and mentor security analysts while ensuring adherence to industry standards and best practices.
Responsibilities
- Developing and implementing automated security solutions using Python, Bash, and related technologies to identify security exposures, optimize security infrastructure, expand capabilities, and meet business requirements
- Supporting and troubleshooting enterprise security infrastructure, including HashiCorp Vault, IAM, SIEM, and EDR platforms, while serving as an escalation point for security-related issues
- Analyzing security vulnerabilities and consulting on exploitation techniques, risk assessments, and remediation strategies to strengthen the organization's security posture
- Participating in attack simulation exercises, threat and vulnerability management initiatives, and continuous assessments to evaluate and enhance the effectiveness of security controls and incident response capabilities
- Ensuring adherence to security standards, best practices, workplace policies, and operational procedures across security engineering activities
- Collaborating with cross-functional teams to provide hands-on support, maintain effective stakeholder communication, update senior leadership on progress, and participate in incident response activities when required
Requirements
- A bachelor’s or master’s degree in computer science, information security, cybersecurity, or a related field
- At least 5 years of experience delivering enterprise security solutions
- Experience with Unix/Linux environments, command-line administration, shell scripting, and software development using Python and Bash
- Experience with SIEM technologies, threat hunting, security monitoring, investigations, and security documentation
- Knowledge of the cyber threat intelligence lifecycle, including frameworks such as the Cyber Kill Chain and MITRE ATT&CK
- Understanding of cyber threats in the financial sector, decentralized finance (DeFi), and blockchain technologies
- Expertise in network and information security technologies, including IDS/IPS, NAC, DLP, VPN, firewalls, endpoint security, anti-malware, database auditing and monitoring, secure architecture design, logging, packet capture, email security, directory services, authentication, remote access, encryption, cloud security controls, and database security
- Experience with reverse engineering, wireless security, web application vulnerabilities (SQL injection, XSS, CSRF), exploit development, and C/C++ is preferred
- The ability to mentor and guide security analysts
- Ability to work independently with minimal supervision
- Ability to collaborate across distributed teams and time zones
- Ability to effectively use collaboration and workflow tools such as Jira and Confluence
- Strong analytical, critical thinking, and problem-solving skills
- Strong written communication and documentation skills
- Ability to perform under pressure
- Ability to adapt to evolving security challenges
- A self-driven approach to continuous learning and team development
What You'll Get
- Generous paid time off policies
- Savings plans and other financial wellness tools available in each region
- Hybrid working opportunities
- Free breakfast, lunch, and snacks daily
- In-office wellness experiences and reimbursement for select wellness expenses (e.g., gym, personal training and more)
- Company-sponsored sports teams and fitness events (JPM Corporate Challenge, Cycle for Survival, Wall Street Rides FAR and more)
- Volunteer opportunities and charitable giving
- Social events, happy hours, treats, and celebrations throughout the year
- Workshops and continuous learning opportunities