About the job
THIS ROLE CAN BE DONE MOSTLY REMOTE W/ QUARTERLY TRAVEL (FOR UP TO 1 WEEK AT A TIME) TO PLAYA VISTA, CA BY THOSE LOCATED IN THE US / AUTHORIZED FOR WORK IN THE US. YOU WOULD BE REQUIRED TO WORK PDT / PST TIME ZONE DAILY.

Our client is looking for a Sr. Cyber Security Engineer to join our dynamic Technology team.

In this role, you will be responsible for the overall security of the organization. This encompasses end-user awareness training, utilizing user behavioral and threat-based analytics to identify issues, reviewing on-going SOX, PCI, and other regulatory compliance reqs (to implement those policies in our tools), assisting in developing policies, playbooks, etc. all while working with various business units for compliance.


What You'll Do:

Work closely with IT management to define security practices for the organization and present recommendations to both technical and non-technical team members
Work closely with the Director of IT to help define a security strategy and roadmap
Perform gap and risk assessments of our current organization and make recommendations on how to remediate
Help consolidate redundant security tools (for example: MFA / SSO is currently being done w/ both Okta & Dou, Dou will be retired)
Contribute to monitoring (SIEM), MDM, end point management, vulnerability detection, etc.
Help fix / improve patch management (currently our servers aren't all automatically being patched)
Understand and explain the underlying techniques that hackers use to exploit and penetrate systems
Maintain a strong technical background to help remedy any vulnerabilities in the organization
Ongoing SOX and PCI compliance and familiarization of the processes
Work closely with security vendors, regularly review logs, UBA, and other security tools and respond accordingly
Map security findings to business impact and communicate security messaging effectively across all business units and to the leadership team
Work closely with Software Engineering and BI teams to ensure our AWS infrastructure is secure

You'll love this job if you are:

A strong communicator and collaborator. From elevator chats to boardroom meetings, you always know the best way to communicate with others to forge effective connections.
Dedicated and fast-moving. You're known to operate with passion, urgency, focus, and discipline
A talented juggler. You successfully manage competing priorities, and you make it look easy
Results oriented and a self-starter. You love to exceed set goals and take on new projects
The definition of integrity. You represent and inspire the highest ethical standards.
Adaptable and ambitious. You will enthusiastically take on other assignments as needed to support your team!

What You'll Need:

Bachelor's degree is a plus
Relevant certifications are a plus.
5+ years of Cyber Security engineering experience that includes:
Experience hardening systems, specifically cloud-heavy environments ideally w/ AWS
Familiarity with cloud computing technology and various means to secure them.
Ideally working in an environment that is 50% or more cloud-based leveraging cloud for IaaS (we are almost 100% in the cloud w/ AWS)
Ideally in the context of securing workloads / servers in the cloud
Knowledge of different attack vectors and methods helpful
Experience analyzing an exploited system and remediating accordingly
Experience monitoring threat actor tactics, techniques and procedures (TTP's) helpful.
Implementation/configuration of as many of the following tools as possible (as our environment is a bit of a fixer upper requiring tool re-implementation, implementation, migration/consolidation)
AWS security (any tools w/in that context are a plus)
Windows / Linux servers, including Linux command line for AWS security
Splunk for SIEM (including regex)
Netskope for CASB (including Curl / Boto / Python)
Crowdstrike or a comparable tool for threat hunting / end point mgmt (must be able to learn/ramp up w/ Crowdstrike quickly if you don't have it)
Proofpoint or a comparable tool for email / phishing / DLP (must be able to learn/ramp up w/ Proofpoint quickly if you don't have it)
Tenable or a comparable tool for vulnerability mgmt tool (must be able to learn/ramp up w/ Tenable quickly if you don't have it)
Any SSO / MFA (Okta / Duo preferred)
Any MDM tool (VMware Workspace One preferred)
AD / Azure AD
Former infrastructure administration / engineering in any of the following is helpful
Solid experience w/ OS (Max, Windows, Linux)
Network devices like firewalls a big plus (especially cloud-based)
Virtualization (VMware and/or Hyper-V welcome)
WAF - web application firewalls a big plus
We have a dedicated IT team you will work w/ (in the context of hardening our environment)
Good business sense to logically think through problems and deliver a balanced approach to security

JOB DESCRIPTION
The Senior Blockchain Analyst for the Blockchain Lab will lead projects related to the Lab's initiatives and related collaboration efforts with both internal and external stakeholders. Responsibilities for this position include leading the development of the strategy and structure for: analyzing data from blockchain network nodes or market sources, exploring the development of new regulatory tools, and on-boarding blockchain vendor capabilities. The Senior Blockchain Analyst will provide thought leadership and, under the direction of the Senior Director, guide the efforts of the research team and closely partner with other teams within FINRA to provide training and strengthen oversight capabilities across the organization on areas related to blockchain technology.

Essential Job Functions:
Lead efforts to design, test, and operate new regulatory tools.
Lead research on crypto projects or market developments and communicate to internal and external stakeholders through various forums and media.
Serve as an expert on blockchain vendor capabilities and manage process of selecting and on-boarding of platforms beneficial to FINRA.
Lead the formation of analysis, written summaries, presentations and commentary designed to inform decision makers of information pertaining blockchain technology and related regulatory impact.
Serve as an expert on market developments related to blockchain technology and as resource for both internal and external constituents.
Query, analyze, visualize data ingested from blockchain networks or market sources as part of POC, bespoke or ongoing projects.
Provide crypto-asset training to FINRA teams to deepen expertise across the organization.
Represent FINRA in external forums.
Other Responsibilities:
Other duties as assigned.
Education/Experience Requirements:
BS/BA in a related field is required; Graduate degree [MBA or Professional degree] preferred. Preferably in Business, Finance, Economics, Applied Math or related fields with some quantitative training.
Minimum of at least 7 years of relevant experience.
Experience conducting and developing the structure for research into crypto projects, protocols, market developments.
Experience in overseeing or leading a technical project, program and/or practice area.
Experience in overseeing or leading efforts to develop structure and strategy for data analysis and modeling, creation of dashboards or other visualization methods.
Experience collaborating across business teams and optimize tasks to create business value.
Self-motivated and entrepreneurial individual that can work in an experimental setting.
Excellent interpersonal communication, writing and presentation skills, including facility with PowerPoint.
Expertise in blockchain market including knowledge of on and off-chain platforms for issuing and trading of crypto assets.
Preferred Experience:
Knowledge of crypto analytics tools a plus, for example for forensic analysis or market surveillance.
Experience with SQL a plus.
Working Conditions:
Will work in a hybrid environment both office and remote.


For work that is performed in CA, CO, New York, NY and WA, the chart below outlines the proposed salary range for the corresponding location. In addition to location, actual compensation is based on various factors, including but not limited to, the candidate's skill set, level of experience, education, and internal peer compensation comparisons

California: Minimum Salary $131,200, Maximum Salary $277,800

Colorado: Minimum Salary $119,400, Maximum Salary $231,400

New York, NY: Minimum Salary $143,200, Maximum Salary $277,800

Washington: Minimum Salary $119,400, Maximum Salary $266,200

#LI-Hybrid

To be considered for this position, please submit an application.

The information provided above has been designed to indicate the general nature and level of work of the position. It is not a comprehensive inventory of all duties, responsibilities and qualifications required.

Please note: If the "Apply Now" button on a job board posting does not take you directly to the FINRA Careers site, enter www.finra.org/careers into your browser to reach our site directly.

FINRA strives to make our career site accessible to all users. If you need a disability-related accommodation for completing the application process, please contact FINRA's accommodation help line at 240.386.4865. Please note that this number is exclusively for inquiries regarding application accommodations.

Employees may be eligible for a discretionary bonus in addition to base pay. FINRA also provides a variety of benefits including comprehensive health and welfare benefits, life and disability insurance, paid holidays, vacation, personal, and sick leave. FINRA offers immediate participation and vesting in a 401(k) plan with company match.