Senior Security Engineer

At Cetera, our Information Security organization protects employees, advisors, and clients from evolving cyber threats across email, cloud, and SaaS environments. As threat actors increasingly exploit communication channels and misuse enterprise data, Cetera continues to invest in advanced email protection and modern data protection controls to reduce risk and improve resilience.

We are seeking a mid career Security Engineer to support and enhance our Email and Data Protection capabilities. This role focuses on the implementation, operation, and continuous improvement of email threat protection controls. The position is hands on and operational, with opportunities to grow deeper expertise in SaaS and cloud data security within a regulated enterprise environment.

•    Implement, operate, and support email protection solutions.
o    Detection and response to phishing, business email compromise (BEC), and social engineering threats
o    Alert triage, investigation, and remediation support
o    Continuous policy adjustments to enhance detection accuracy and minimize false positives.
•    Support data protection controls across cloud and SaaS environments, including:
o    Secure configuration and monitoring of services that store or process enterprise data
o    Visibility into data exposure risks and inappropriate data sharing patterns
o    Integration of data protection capabilities with other security platforms
•    Participate in incident response activities, including:
o    Email related security investigations
o    Data exposure or misuse events
o    Coordination with SOC and IT operations teams
•    Develop and maintain documentation, including:
o    Email and data protection configurations and standards
o    Operational runbooks and investigation workflows
o    Troubleshooting and response guidance
•    Support audit and compliance activities by:
o    Assisting with evidence collection
o    Validating control operation
o    Supporting internal and external audit requests

•    2–5 Experience with modern, AI-driven email threat detection and defense systems.
•    Experience in information security, data protection, cloud security, or cybersecurity engineering
•    Experience supporting data protection or data security controls in cloud or SaaS environments.
•    Understanding of common threat and risk scenarios.
•    Ability to operate within established security standards while contributing improvements
 

#LI-Hybrid