Principal Security Engineer

Principal Security Engineer | New York, NY | On-site (5 days per week) | $200k-$220k base with 20% bonus

A leading publicly listed organisation operating in a highly regulated, global environment is seeking a Principal Security Engineer to join its growing cybersecurity function.

This is a rare opportunity to take ownership of both the technical security roadmap and the delivery of key security initiatives within a fast-paced business. Working closely with IT leadership, external security partners, and senior stakeholders, you will help mature the organisation's security capabilities while remaining hands-on across cloud, infrastructure, identity, monitoring, and incident response.

The Role

As the senior hands-on security engineering specialist, you will be responsible for implementing and enhancing security controls across a complex enterprise environment. You will play a key role in strengthening the organisation's security posture, driving remediation efforts, supporting audits, and delivering projects aligned to an established cybersecurity roadmap.

This role is best suited to someone who enjoys building, improving, and operating security capabilities rather than working solely in governance or advisory capacities.

Key Responsibilities

• Lead the implementation and enhancement of enterprise security controls across cloud, network, endpoint, and identity platforms
• Design, configure, and maintain technologies including firewalls, VPNs, EDR, SIEM, MFA, IDS/IPS, and security monitoring solutions
• Drive incident response activities and support the ongoing development of detection and response capabilities
• Develop and tune security monitoring, alerting, and reporting within the security tooling ecosystem
• Partner with internal teams and external service providers to deliver security initiatives and remediation programs
• Support vulnerability management and patching programmes across infrastructure, cloud, and endpoint environments
• Contribute to security policy development and ensure technical controls align with regulatory and compliance requirements
• Manage audit evidence requests and support external audits and assessments
• Deliver security posture updates and risk reporting to senior stakeholders
• Assist with third-party and vendor risk assessments

Required Experience

• 7+ years of experience across cybersecurity and enterprise infrastructure environments
• Strong hands-on experience securing large-scale, multi-site organisations
• Deep knowledge of Microsoft security technologies including:
• Microsoft Sentinel
• Microsoft Defender
• Entra ID (Azure AD)
• Intune
• Strong Azure cloud security experience
• Experience with identity security, access management, and directory services
• Solid networking and infrastructure security fundamentals including firewalls, VPNs, segmentation, and intrusion detection/prevention technologies
• Hands-on experience with incident response, threat detection, vulnerability management, and security operations
• Experience supporting compliance frameworks such as SOX, NIST CSF, ISO 27001, CIS Controls, PCI-DSS, HIPAA, GDPR, or similar
• Experience preparing and presenting audit evidence to internal and external auditors
• Scripting or automation experience using PowerShell and/or Python

Ideal Background

We are particularly interested in candidates who have worked within:

• Financial services
• Hedge funds
• Private equity
• Publicly listed organisations
• Other highly regulated environments

You will thrive in this position if you enjoy working within lean teams, taking ownership of security outcomes, and operating in a fast-moving environment where priorities can shift quickly.

What's on Offer

• Opportunity to make a significant impact within a growing cybersecurity programme
• High visibility with senior leadership
• Broad technical exposure across cloud, infrastructure, identity, and security operations
• A collaborative environment where security is a strategic priority
• Competitive compensation package

For a confidential discussion, please apply now.