Security Engineer IV

Edward Jones is seeking a Security Engineer IV to design, implement, and enhance enterprise security for a leading finance and insurance firm. In this senior role, you will architect and maintain security controls across cloud and on-prem environments, lead threat detection and incident response efforts, and drive secure network, endpoint, and application configurations. You will partner with technology and business stakeholders to assess risk, define standards, and ensure regulatory and policy compliance. This role mentors junior engineers, champions secure-by-design practices, and supports a culture of integrity, collaboration, and continuous improvement.

Responsibilities

• Architect, implement, and maintain enterprise security controls across cloud and on-prem environments
• Lead threat detection, incident response, and root-cause analysis for security events
• Design and harden network, endpoint, and application security configurations
• Conduct security risk assessments and drive remediation plans with stakeholders
• Ensure compliance with financial services security, privacy, and regulatory requirements
• Develop and maintain security standards, runbooks, and technical documentation
• Collaborate with engineering and product teams to embed secure-by-design practices
• Evaluate, implement, and tune security tools such as SIEM, EDR, and IDS/IPSMentor and coach junior security engineers and analysts
• Support security awareness efforts and contribute to continuous improvement of the security program

Required Skills

• Network security architecture (firewalls, VPN, IDS/IPS)
• Cloud security (AWS, Azure, or GCP)
• Endpoint detection and response (EDR) tools
• Security Information and Event Management (SIEM)
• Incident response and forensics
• Vulnerability management and remediation
• Identity and access management (IAM)
• Secure configuration and hardening (Windows, Linux, cloud)
• Scripting/automation (Python, Power
• Shell, or similar)
• Knowledge of security frameworks and standards (NIST, ISO 27001, PCI, SOC)