Job description

The Senior Security Engineer works under minimal supervision to engineer, administer, and optimize security data pipeline and Zero Trust access platforms. Responsibilities include managing data routing and transformation across cloud and on-prem environments, ensuring pipeline performance and scalability, and developing automation to streamline access workflows. This role requires strong networking fundamentals and a demonstrated ability to design solutions. Senior Security Engineer — Security Data Pipelines & Zero Trust Access About the Role: We re looking for a Senior Security Engineer to own the design, operation, and scaling of the security data pipeline platform that feeds our SIEM, and to drive automation for our Zero Trust access platform. This is a hands-on engineering role with real ownership: you ll take ambiguous problems ( data delivery is lagging, this team needs just-in-time access to a new environment ) from symptom to root cause to a durable, well-designed solution. You ll join a Security Engineering & Architecture team responsible for the platforms that power detection, response, and secure access across the enterprise. What You ll Do: Own the observability/telemetry pipeline platform (primary focus) Serve as the primary administrator and engineer for Cribl Stream: building routes, pipelines, and packs; managing sources and destinations; and shaping data in flight (parsing, enrichment, field extraction, reduction, transformation) before it lands in Splunk and other destinations. Design and operate cloud-native data collection across AWS, Azure, and GCP — working with services like SQS/SNS, S3 event notifications, Azure Event Hubs, and GCP Pub/Sub to reliably ingest security telemetry at scale. Engineer for reliability and scale: tune persistent queues and backpressure behavior, troubleshoot data delivery and throughput issues, capacity-plan worker infrastructure, implement autoscaling, and design load distribution (e.g., DNS-based or load-balancer-based) so the platform grows gracefully with ingest volume. Manage deployments and lifecycle of pipeline infrastructure — upgrades, configuration management, and monitoring of distributed worker fleets. Help lead our adoption of Splunk Edge Processor as a complementary data processing tier, building SPL2 pipelines and defining where each tool fits in the overall architecture. Support and automate our Zero Trust access platform Administer a Zero Trust Network Access (ZTNA) / software-defined perimeter platform: handle data access requests, adjust entitlements and policies, and troubleshoot user access issues. Build automation (primarily Python) against the platform s APIs to enable just-in-time access — provisioning entitlements automatically from approved request workflows so users get exactly the access they need, only when approved, and lose it when it expires. Apply strong networking fundamentals daily: subnetting, IP address planning, routing, DNS, ports/protocols, and TLS. Engineer, don t just operate Take problems from symptom to root cause to redesigned solution. Write scripts and tooling to eliminate repetitive work. Document architectures and decisions so others can build on your work. Partner with SIEM engineers, detection teams, and infrastructure teams to keep security data complete, timely, and cost-efficient. Nice to Have: Cribl certifications (CCOE/Admin) or deep production Cribl Stream experience with packs and distributed worker groups. Splunk Edge Processor or SPL2 experience. Direct Appgate SDP experience, especially API-driven policy/entitlement automation or ITSM-integrated just-in-time access workflows. Infrastructure-as-code and deployment tooling (Terraform, Ansible, CI/CD pipelines, containers/Kubernetes). Experience with SIEM cost optimization and data reduction strategies. Experience operating security tooling in a regulated enterprise environment. Who You Are: You treat the data stopped flowing as an engineering problem, not a ticket to escalate. You re comfortable being the subject-matter expert — the person others come to when the platform misbehaves. You automate yourself out of repetitive work instinctively. You can explain a complex architecture to a security analyst, a network engineer, and a director — and adjust the depth for each. Other Responsibilities: Represents FINRA at speaking engagements with various internal and external constituencies Leads multi-level initiatives across Regulatory Operations Provides subject matter expertise in regulatory area to advance FINRA and industry initiatives (e.g., CAT, Notice to Members, rule filings, market events, congressional testimony preparation) Remains current on industry and technology trends, practices, and regulatory impacts Education/Experience Requirements: Bachelor s degree and a minimum of ten (10) years of experience in the securities/financial services industry; or an equivalent combination of education and experience in positions of increasing responsibilities. Minimum five (5) years supervisory experience required. Demonstrated project management, process improvement, understanding of surveillance development lifecycle and goal attainment skills. Extensive working knowledge of FINRA, MSRB and other SRO rules and the Securities Exchange Act of 1934 and the rules and regulations thereunder. Working knowledge of data analytics and data analytic platforms (e.g., Power Bi and Dataiku) Demonstrated ability to lead regulatory program and produce outstanding measurable results. Requires excellent written and verbal communications skills, including interpersonal and presentation skills. Strong organizational skills and excellent detail orientation. Working Conditions: Hybrid work environment, with defined in-person presence requirements. Hours may extend beyond normal business hours. Travel will be required, as necessary. For work that is performed in CO, FL, TX, IL, PA, MA, MD, VA, Washington, DC, NY and NJ, please refer to the chart below for the salary range for the corresponding location. FINRA complies with all state and local pay transparency laws and regulations requiring the disclosure of salary ranges for the position. In addition to location, actual compensation is based on various factors, including but not limited to, the candidate’s skill set, level of experience, education, and market considerations. CO/FL/TX: Minimum Salary $97,700, Maximum Salary $176,100 IL/PA: Minimum Salary $107,500, Maximum Salary $194,100 MA/MD/VA/Washington, DC: Minimum Salary $112,300 Maximum Salary $202,500 NY/NJ: Minimum Salary $112,300, Maximum Salary $211,400 #LI-Hybrid For work that is performed in CO, FL, TX, IL, PA, MA, MD, VA, Washington, DC, NY and NJ, please refer to the chart below for the salary range for the corresponding location. FINRA complies with all state and local pay transparency laws and regulations requiring the disclosure of salary ranges for the position. In addition to location, actual compensation is based on various factors, including but not limited to, the candidate’s skill set, level of experience, education, and market considerations. To be considered for this position, please submit an application. Applications are accepted on an ongoing basis. The information provided above has been designed to indicate the general nature and level of work of the position. It is not a comprehensive inventory of all duties, responsibilities and qualifications required. Please note: If the “Apply Now” button on a job board posting does not take you directly to the FINRA Careers site, enter www.finra.org/careers into your browser to reach our site directly. Employees may be eligible for a discretionary bonus in addition to base pay. Non-exempt employees are also eligible for overtime pay in accordance with federal, state, or local law. As part of its dedication to employee wellness, FINRA provides comprehensive health, dental and vision insurance. Additional insurance includes basic life, accidental death and dismemberment, supplemental life, spouse/domestic partner and dependent life, and spouse/domestic partner and dependent accidental death and dismemberment, short- and long-term disability, long-term care, business travel accident, disability and legal. FINRA offers immediate participation and vesting in a 401(k) plan with company match and eligibility for participation in an additional FINRA-funded retirement contribution, tuition reimbursement, commuter benefits, and other benefits that support employee wellness, such as adoption assistance, backup family care, surrogacy benefits, employee assistance, and wellness programs. Time Off and Paid Leave* FINRA encourages its employees to focus on their health and wellness in many ways, including through a generous time-off program of 15 days of paid time off, 5 personal days and 9 sick days, unless otherwise required by law (all pro-rated in the first year). Additionally, we are proud to support our communities by providing two volunteer service days (based on full-time schedule). Other paid leave includes military leave, jury duty leave, bereavement leave, voting and election official leave for federal, state or local primary and general elections, care of a family member leave (available after 90 days of employment); and childbirth and parental leave (available after 90 days of employment). Full-time employees receive nine paid holidays. *Based on full-time schedule Important Information FINRA’s Code of Conduct imposes restrictions on employees’ investments and requires financial disclosures that are uniquely related to our role as a securities regulator. FINRA employees are required to disclose to FINRA all brokerage accounts that they maintain, and those in which they control trading or have a financial interest (including any trust account of which they are a trustee or beneficiary and all accounts of a spouse, domestic partner or minor child who lives with the employee) and to authorize their broker-dealers to provide FINRA with duplicate statements for all of those accounts. All of those accounts are subject to the Code’s investment and securities account restrictions, and new employees must comply with those investment restrictions—including disposing of any security issued by a company on FINRA’s Prohibited Company List or obtaining a written waiver from their Executive Vice President—by the date they begin employment with FINRA. Employees may only maintain securities accounts that must be disclosed to FINRA at one or more securities firms that provide an electronic feed (e-feed) of data to FINRA, and must move securities accounts from other securities firms to a firm that provides an e-feed within three months of beginning employment. You can read more about these restrictions here . As standard practice, employees must also execute FINRA’s Employee Confidentiality and Invention Assignment Agreement without qualification or modification and comply with the company’s policy on nepotism. Search Firm Representatives Please be advised that FINRA is not seeking assistance or accepting unsolicited resumes from search firms for this employment opportunity. Regardless of past practice, a valid written agreement and task order must be in place before any resumes are submitted to FINRA. All resumes submitted by search firms to any employee at FINRA without a valid written agreement and task order in place will be deemed the sole property of FINRA and no fee will be paid in the event that person is hired by FINRA. FINRA is an Equal Opportunity Employer All qualified applicants receive consideration for employment without regard to any legally protected category, including race, color, age, national origin, ethnicity, religion, disability, genetic information, military or veteran status, sex, or any other status or classification protected by state or local law. FINRA strives to make our career site accessible to all users. If you need a disability-related accommodation for completing the application process, please contact FINRA’s Employee Relations team at 240-386-4865 or by email at EmployeeRelations FINRA.org . Please note that this process is exclusively for inquiries regarding accommodations in the application process. FINRA abides by the requirements of 41 CFR 60-741.5(a). This regulation prohibits discrimination against qualified individuals on the basis of disability and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified individuals with disabilities. FINRA abides by the requirements of 41 CFR 60-300.5(a). This regulation prohibits discrimination against qualified protected veterans and requires affirmative action by covered prime contractors and subcontractors to employ and advance in employment qualified protected veterans. ©2026 FINRA. All rights reserved. FINRA is a registered trademark of the Financial Industry Regulatory Authority, Inc.

Requirements

Must-haves

Senior Security Engineer — Security Data Pipelines & Zero Trust Access
You ll join a Security Engineering & Architecture team responsible for the platforms that power detection, response, and secure access across the enterprise.
Design and operate cloud-native data collection across AWS, Azure, and GCP — working with services like SQS/SNS, S3 event notifications, Azure Event Hubs, and GCP Pub/Sub to reliably ingest security telemetry at scale.
Manage deployments and lifecycle of pipeline infrastructure — upgrades, configuration management, and monitoring of distributed worker fleets.
Help lead our adoption of Splunk Edge Processor as a complementary data processing tier, building SPL2 pipelines and defining where each tool fits in the overall architecture.
Apply strong networking fundamentals daily: subnetting, IP address planning, routing, DNS, ports/protocols, and TLS.
Engineer, don t just operate Take problems from symptom to root cause to redesigned solution.
Write scripts and tooling to eliminate repetitive work.
Document architectures and decisions so others can build on your work.
Partner with SIEM engineers, detection teams, and infrastructure teams to keep security data complete, timely, and cost-efficient.
Splunk Edge Processor or SPL2 experience.
Direct Appgate SDP experience, especially API-driven policy/entitlement automation or ITSM-integrated just-in-time access workflows.
Infrastructure-as-code and deployment tooling (Terraform, Ansible, CI/CD pipelines, containers/Kubernetes).
Experience with SIEM cost optimization and data reduction strategies.
Experience operating security tooling in a regulated enterprise environment.
Who You Are: You treat the data stopped flowing as an engineering problem, not a ticket to escalate.
You re comfortable being the subject-matter expert — the person others come to when the platform misbehaves.
You automate yourself out of repetitive work instinctively.
You can explain a complex architecture to a security analyst, a network engineer, and a director — and adjust the depth for each.
Represents FINRA at speaking engagements with various internal and external constituencies
Leads multi-level initiatives across Regulatory Operations
Provides subject matter expertise in regulatory area to advance FINRA and industry initiatives (e.g., CAT, Notice to Members, rule filings, market events, congressional testimony preparation)
Remains current on industry and technology trends, practices, and regulatory impacts

Nice-to-haves

Nice to Have: Cribl certifications (CCOE/Admin) or deep production Cribl Stream experience with packs and distributed worker groups.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

awsazuregcppythonapici/cdkubernetes

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Dental

Vision

401(K)

Pto

Paid Time Off

Parental Leave

Wellness