Security Engineer
MillenniumUSA6d ago
SecurityEngineeringremotecurated-jd
Job description
Security Engineer at Millennium.
About the role
Millennium is seeking a security professional to join our global information security department. You will help defend our firm against digital threats by managing security controls and improving our technical resilience.
Key facts
What you'll do
- Create and manage security standards for email, network, data lakes, and SOAR systems.
- Analyze security logs and alerts to detect vulnerabilities or unauthorized activity.
- Provide technical guidance to the security operations group.
- Improve perimeter defenses using automation and better reporting.
- Work with trading, legal, compliance, and technology departments to enforce firm policies.
- Perform system audits and manage the resolution of penetration test findings.
- Participate in incident response and use intelligence to refine our defensive strategy.
- Document security solutions and mentor junior staff.
Requirements
- 3+ years in a technical position, with 2+ years specifically in information or network security.
- Hands-on experience with SIEM, data lakes, or logging pipelines such as Splunk, ELK, Sentinel, or S3/Athena.
- Proficiency in SOAR automation.
- Experience with network security tools including firewalls, intrusion detection, and network access control.
- Deep knowledge of TCP/IP, DNS, virtualization, and core networking.
- Ability to use packet analysis tools like Wireshark, tcpdump, or ngrep.
- Experience with proxy engineering.
- Familiarity with cloud environments like AWS, GCP, or Azure.
- Scripting skills in Python, PowerShell, or shell.
Nice to have
- Experience in the financial services sector.
- Background in breach and attack simulation, AI security, or email security.
- Bachelor degree in Engineering, Computer Science, or a related field.
- Industry certifications such as CISM, GCIA, or CISSP.
Skills & tools
- Splunk, ELK, Sentinel, S3, Athena
- SOAR
- Python, PowerShell, Shell
- AWS, GCP, Azure
- Wireshark, tcpdump, ngrep
- TCP/IP, DNS, Firewalls