Senior Cybersecurity Engineer

Description Larson Financial Holdings LLC is seeking a proven Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The Senior Cybersecurity Engineer plays a critical role in protecting the organization's information systems, data and infrastructure.

The role builds and improves security tools, automation and policies, including using AI tools to connect security platforms and produce monitoring dashboards. It also supports the day-to-day administration of cybersecurity operations: threat monitoring, incident response, compliance initiatives and security awareness. The role researches security improvements and implements them.

As a member of the Larson Technology Services team, the Senior Cybersecurity Engineer also contributes to broader technology operations as needed, in a collaborative environment where team members support one another across technology functions to keep our services reliable and effective.

Key responsibilities:

Security engineering and tool development

• Design and build security controls across endpoint, identity, network and cloud environments, including Microsoft Azure and Entra ID.
• Research and evaluate new security tools; develop recommendations, business cases, proofs of concept and vendor assessments; and deploy and configure the tools selected.
• Build detection logic, automation and response playbooks.
• Perform threat modeling and security reviews for new systems, changes and projects, and recommend mitigations.
• Develop and improve security baselines and hardening standards.
• Integrate security tooling to reduce manual work, such as automating phishing triage, phishing campaign reporting and vulnerability ticketing.
• Use AI tools, APIs and low-code automation to connect security and SaaS platforms (for example EDR, vulnerability management, phishing simulation, Microsoft 365, Entra ID and ticketing) and consolidate their data.
• Build and maintain dashboards and reports for security monitoring, including vulnerability, phishing, incident and compliance metrics, using AI-assisted development and visualization tools.
• Use AI tools in line with organizational policy and data-handling requirements and recommend safeguards for AI use within the security environment.

Cybersecurity operations

• Monitor, investigate and respond to security alerts and incidents, including phishing emails, malware alerts and unauthorized access attempts.
• Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners.
• Remediate security incidents, conduct follow-up analysis, document findings and actions taken, and recommend process improvements based on lessons learned.
• Manage and respond to phishing reports submitted by staff; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage.
• Perform regular vulnerability assessments, and work with system owners and end users to prioritize and remediate identified risks.
• Contribute to the planning and rollout of new cybersecurity objectives, tools and initiatives as the security program evolves.

Security awareness and phishing simulations

• Plan and run recurring phishing simulation campaigns, including setup, scheduling and distribution.
• Analyze campaign results and identify departments or individuals who need additional training or follow-up.
• Develop and deliver security awareness communications, training materials and coaching based on simulation outcomes and leadership direction.
• Maintain records of simulation results and awareness training completion to support reporting and continuous improvement.
• Recommend improvements to the security awareness program, including training content, success metrics and risk-based targeting.

Compliance and risk management

• Support day-to-day efforts to achieve and maintain compliance with applicable security controls.
• Conduct periodic control assessments, gather evidence and work with stakeholders to close compliance gaps.
• Draft and maintain security policies, standards, procedures, risk assessments and control inventories.
• Map security controls to applicable frameworks and recommend control improvements.
• Conduct risk assessments and recommend remediation priorities.
• Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries.
• Identify emerging risks and recommend policy or control improvements.

Technology operations and service support

• Provide systems administration support as assigned, including user account management, access provisioning, Conditional Access policies and endpoint configuration.
• Assist with service desk escalations that require elevated access or advanced troubleshooting.
• Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management.

Requirements

• Bachelor's degree in Cybersecurity, Computer Science, Information Systems or a related field, or equivalent professional experience.
• 8+ years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level.
• Proven experience owning security compliance work aligned to frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2 or CIS Controls, including audit preparation and evidence management.
• Deep experience architecting, deploying and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design and integration across the environment.
• Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python to reduce manual effort and improve security operations.
• Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources and mapping detections to frameworks such as MITRE ATT&CK.
• Experience applying AI tools and APIs to connect systems, automate workflows and build dashboards or reports, with sound judgment about data handling and risk.
• Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management and cloud security posture.
• Experience authoring and maintaining security policies, standards and procedures, and driving their adoption across business and technical teams.
• Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting on outcomes.
• Demonstrated ability to lead incident investigations and response, and to communicate findings and risk clearly to technical teams, executives and non-technical audiences.
• Ability to evaluate security solutions, build business cases and present well-supported recommendations to management and leadership.
• Ability to manage multiple competing priorities independently, balancing strategic projects with operational responsibilities in a fast-paced environment.
• Experience mentoring and providing technical guidance to technology staff.

Preferred qualifications:

• Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, or Microsoft SC-200 or AZ-500.
• Experience with security architecture reviews, risk assessments, or third-party and vendor risk management.
• Experience with infrastructure as code or DevSecOps practices.
• Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P and GLBA.

Larson is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, national origin, disability status, protected veteran status, or any other character protected by law.