Cyber Security Engineer

Job summary

Implement and automate cryptographic infrastructure, including HSMs and key management platforms, to secure sensitive data and assets. Manage the end-to-end encryption key lifecycle and integrate security protocols into enterprise applications.

Job details

Job Title: Cybersecurity Engineer Position Summary We are seeking an experienced Cybersecurity Engineer to join our dedicated Crypto team within the Technology division. In this role, you will be responsible for implementing, managing, and automating the cryptographic infrastructure that secures the Firm’s most sensitive data, transactions, and critical assets. As part of the Cybersecurity Engineering job family, you will develop and maintain robust secure systems, cryptographic services, and key management solutions to protect Firm assets and guarantee full compliance with global regulatory standards. Key Responsibilities Cryptographic Infrastructure Management: Build, maintain, and support enterprise cryptographic infrastructure, including Hardware Security Modules (HSMs) and enterprise key management platforms. Key Lifecycle Governance: Execute and manage the end-to-end encryption key lifecycle—including key generation, distribution, rotation, archival, and destruction—in strict alignment with Firm security standards. Enterprise Integration: Integrate cryptographic services into enterprise applications and workflows using industry-standard security protocols such as KMIP and PKCS#11. Automation & Process Improvement: Drive automation initiatives using scripting to optimize key management workflows, certificate deployments, and operational processes. Risk & Compliance Collaboration: Partner closely with cybersecurity, risk, and compliance teams to enforce internal security controls and adhere to global financial regulatory requirements. System Observability & Maintenance: Monitor system health, performance, and operational integrity using observability platforms; troubleshoot and resolve complex technical issues related to cryptographic systems and secure vaults. Technical Documentation & Support: Maintain accurate technical documentation, create internal FAQs, and provide support to customer and development teams integrating with cryptographic platforms. Stakeholder Engagement: Contribute to complex security projects and communicate operational plans, status updates, and risk summaries to team members and division leadership. Core Technical Skills: Cryptographic Lifecycle Management: Strong practical understanding of encryption key lifecycle processes (generation, rotation, archival, and destruction). HSM & KMS Platforms: Direct experience supporting enterprise cryptographic infrastructure and Key Management Systems (specifically Thales CipherTrust Manager and Luna HSMs). Cryptographic Protocols: Demonstrated experience integrating applications via KMIP and PKCS#11. Operating Systems: Solid proficiency in Linux or other UNIX-based operating environments. Automation & Scripting: hands-on experience using scripting languages (e.g., Python, PowerShell) to drive operational efficiency. Observability & Monitoring: Hands-on experience or working knowledge of monitoring and metrics platforms such as Prometheus and Grafana. Professional & Analytical Capabilities: Experience Level: Minimum 2+ years of relevant experience in cybersecurity engineering, cryptography, or identity & key management domains. Risk & Governance Awareness: Sound understanding of regulatory frameworks, audit requirements, and risk management principles applicable to financial cryptographic infrastructure. Communication & Synthesis: Proven ability to analyze complex technical information, translate it into actionable execution plans, and present clear summaries to technical and non-technical stakeholders. Domain Knowledge: Strong grasp of financial services technology environments and discipline-specific security standards.

What you’ll do

Implement and automate cryptographic infrastructure, including HSMs and key management platforms, to secure sensitive data and assets. Manage the end-to-end encryption key lifecycle and integrate security protocols into enterprise applications.

Requirements

Requires at least 2 years of experience in cybersecurity engineering or cryptography with proficiency in Linux and scripting languages like Python. Must have direct experience with Thales CipherTrust Manager, Luna HSMs, and industry-standard protocols like KMIP.

Listed skills

• Technical Documentation · Preferred
• Compliance · Preferred
• Risk Management · Preferred
• Linux · Preferred
• Python · Preferred

Other relevant skills

Identified from the job description. Confirm important requirements above.

• Cryptographic Lifecycle Management
• HSM
• KMS
• Thales CipherTrust Manager
• Luna HSM
• KMIP
• PKCS#11
• Linux
• Python
• PowerShell
• Prometheus
• Grafana
• Cybersecurity Engineering
• Risk Management
• Compliance
• Technical Documentation

Job areas

• Technology
• Security & Safety
• Engineering
• Finance & Accounting
• Software