Asset & Wealth Management – New York - Associate Security Engineering - 10415579

Associate, Security Engineering

Location: New York, New York

Job Duties

• Perform security assessments of business-initiated projects to drive adoption of application and infrastructure security controls and best practices, ensuring security and privacy by design.
• Collaborate with technical and global teams on major technology initiatives to embed security early and enhance detection capabilities through improved tools, tuning, and data sources.
• Review system architectures (client/server, cloud, web, mobile) and security controls to identify gaps and ensure alignment with firm policies, standards, and regulatory requirements.
• Conduct application security risk assessments across the SDLC, including vulnerability assessments and penetration testing of internal and external applications in coordination with vulnerability management teams.
• Perform secure code reviews for applications using languages such as Java, React, and Python to identify vulnerabilities and strengthen security posture.
• Evaluate third-party system integrations and work with infrastructure teams to implement and validate security controls across platforms.
• Communicate technical findings, risks, and security gaps clearly to stakeholders, developers, and engineers through reporting and presentations to support issue tracking and remediation.

Job Requirements

Option 1: Master’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering, or a related field, plus one (1) year of experience in the job offered or a related Security Engineering role.

Option 2: Bachelor’s degree (U.S. or foreign equivalent) in Cyber Security, Computer Science, Computer Engineering, or a related field, plus three (3) years of experience in the job offered or a related Security Engineering role.

Prior work experience must include (1) year (with a Master’s degree) or (3) years (with a Bachelor’s degree) with each of the following:

• Working with both application and infrastructure architecture and security across on-premise and cloud environments.
• Working with application security best practices, including OWASP and CWE.
• Working with application security vulnerabilities and controls to remediate risks.
• Assessing and mitigating software security threat vectors, including threat modeling, attack surface analysis, security design reviews, source code reviews, penetration testing, and/or vulnerability assessments.
• Working in a shift-left environment to embed security in the design phase and implement security controls within system architecture.
• Conducting infrastructure or application security risk assessments.

Salary Range

Annual base salary for this New York, New York–based position is $132,000 - $184,400.