Principal Security Engineer | New York, NY | On-site (5 days per week) | $200k-$220k base with 20% bonus

A leading publicly listed organisation operating in a highly regulated, global environment is seeking a Principal Security Engineer to join its growing cybersecurity function.

This is a rare opportunity to take ownership of both the technical security roadmap and the delivery of key security initiatives within a fast-paced business. Working closely with IT leadership, external security partners, and senior stakeholders, you will help mature the organisation's security capabilities while remaining hands-on across cloud, infrastructure, identity, monitoring, and incident response.

The Role

As the senior hands-on security engineering specialist, you will be responsible for implementing and enhancing security controls across a complex enterprise environment. You will play a key role in strengthening the organisation's security posture, driving remediation efforts, supporting audits, and delivering projects aligned to an established cybersecurity roadmap.

This role is best suited to someone who enjoys building, improving, and operating security capabilities rather than working solely in governance or advisory capacities.

Key Responsibilities

Lead the implementation and enhancement of enterprise security controls across cloud, network, endpoint, and identity platforms
Design, configure, and maintain technologies including firewalls, VPNs, EDR, SIEM, MFA, IDS/IPS, and security monitoring solutions
Drive incident response activities and support the ongoing development of detection and response capabilities
Develop and tune security monitoring, alerting, and reporting within the security tooling ecosystem
Partner with internal teams and external service providers to deliver security initiatives and remediation programs
Support vulnerability management and patching programmes across infrastructure, cloud, and endpoint environments
Contribute to security policy development and ensure technical controls align with regulatory and compliance requirements
Manage audit evidence requests and support external audits and assessments
Deliver security posture updates and risk reporting to senior stakeholders
Assist with third-party and vendor risk assessments

Required Experience

7+ years of experience across cybersecurity and enterprise infrastructure environments
Strong hands-on experience securing large-scale, multi-site organisations
Deep knowledge of Microsoft security technologies including:
Microsoft Sentinel
Microsoft Defender
Entra ID (Azure AD)
Intune
Strong Azure cloud security experience
Experience with identity security, access management, and directory services
Solid networking and infrastructure security fundamentals including firewalls, VPNs, segmentation, and intrusion detection/prevention technologies
Hands-on experience with incident response, threat detection, vulnerability management, and security operations
Experience supporting compliance frameworks such as SOX, NIST CSF, ISO 27001, CIS Controls, PCI-DSS, HIPAA, GDPR, or similar
Experience preparing and presenting audit evidence to internal and external auditors
Scripting or automation experience using PowerShell and/or Python

Ideal Background

We are particularly interested in candidates who have worked within:

Financial services
Hedge funds
Private equity
Publicly listed organisations
Other highly regulated environments

You will thrive in this position if you enjoy working within lean teams, taking ownership of security outcomes, and operating in a fast-moving environment where priorities can shift quickly.

What's on Offer

Opportunity to make a significant impact within a growing cybersecurity programme
High visibility with senior leadership
Broad technical exposure across cloud, infrastructure, identity, and security operations
A collaborative environment where security is a strategic priority
Competitive compensation package

For a confidential discussion, please apply now.

Franklin Fitch

Latest Jobs

Principal Security Engineer