eNGINE builds Technical Teams. We are a Solutions and Placement firm shaped by decades of interaction with Technical professionals. Our inspiration is continuous learning and engagement with the markets we serve, the talent we represent, and the teams we build. Our Consulting Workforce is encouraged to enjoy career fulfillment in the form of challenging projects, schedule flexibility, and paid training/certifications. Successful outcomes start and finish with eNGINE .
eNGINE is hiring a Security Analyst, who sits at the intersection of cyber security and data-driven accountability. You'll review reports and controls across IAM, Vulnerability Management, and other security domains — and when something doesn't add up (like a policy mandating 16-character passwords changed every 60 days, but only half the team complying), you'll be the one to flag it, grade it, and back it up with evidence.
Responsibilities:
- Review and analyze complex security data to deliver clear insights, conclusions, and actionable recommendations
- Recommend risk mitigation strategies, ensuring standards are met in coordination with ISD ECM, and escalate high-risk activity for treatment
- Identify operational roadblocks and drive timely remediation
- Partner closely with Information Security and other teams in a collaborative, goal-oriented way
- Support ad hoc reporting and risk treatment discussions (IAM & Vulnerability remediation), partnering with the ISD ECM Operations team on policy waivers and control gap oversight
- Consult with IT and business stakeholders to support key components of the company's information security infrastructure
What You Bring:
- Bachelor's degree in Computer Science or related field (or equivalent experience); advanced degree a plus
- Experience in GRC (Governance, Risk & Compliance) within information security or related technology; financial services/securities industry experience a plus
- Strong analytical and troubleshooting skills — you're comfortable digging into data and asking tough questions
- Experience with BI/data reporting tools (SQL, DB2, Power BI, Business Objects, Qlik, Tableau, Excel/PowerPoint) — you don't need to build these tools, just read and interpret what they produce
- Working knowledge of cybersecurity frameworks (NIST CSF, CRI, ISO, etc.)
- General understanding of Identity and Access Management (IAM) principles a plus