Senior Cyber Security Engineer

Are you ready to build the future of our company?

About Mercury® Financial

Mercury® Financial is an innovative and growing financial services company with locations in both Austin, TX and Wilmington, DE. Our mission is to help customers build and maintain their financial future by offering them credit cards they can afford and understand. After only a few years, we’ve had great success building a significant credit card program, but we are aiming higher, which means we have lots of challenging problems for you to help us solve. Come onboard, work with some of the most talented individuals who thrive on collaboration and teamwork; and help us continue to build something special.

Location

Mercury® Financial is headquartered in the progressive and entrepreneurial tech hub of Austin, Texas. Our physical location is situated in a beautiful park like setting called the Domain. The Domain's ideal location and exceptional amenities, amazing restaurant selection and convenient parking, are all perfect for after work happy hours!

What it’s like to work here: 

We foster a collaborative and innovative culture where you will be empowered to do your best work. All of our employees bring everything they have to their job and are part of a larger team working towards a greater goal. We do right by our employees, our partners, and our customers.

Role: We are seeking an experienced and detail-oriented Senior Cyber Security Engineer with an analytical mindset and deep expertise in cybersecurity methodologies, frameworks, and standards. The ideal candidate will be responsible for safeguarding our systems and infrastructure by identifying vulnerabilities, improving security controls, and managing key security tools and technologies. This role demands strong problem-solving skills, the ability to work under pressure, and a commitment to upholding security protocols within a fast-paced environment.

What a day is like:

Security Infrastructure Management:

• Design, implement, configure, and maintain security controls for networks, systems, applications, and data, ensuring they align with industry standards (NIST, ISO 27001, PCI-DSS, etc.)
• Administer and optimize security platforms such as Data Security Posture Management, Cyber Asset management and Compliance.
• Review configuration for security tools including Firewalls, Intrusion Detection and Prevention Systems (IDS/IPS), Security Information and Event Management (SIEM), Internet Proxies, and Data Loss Prevention (DLP) solutions
• Monitor and tune security controls to improve overall security posture across cloud environments (AWS)

Vulnerability and Risk Management:

• Lead vulnerability management programs by overseeing vulnerability scanning and coordinating remediation efforts with system owners, adhering to defined SLAs
• Conduct regular risk assessments and security audits, providing recommendations for mitigating risks, and report findings to senior leadership
• Collaborate with internal and external teams to manage security certifications (e.g., PCI-DSS, SOC 2) and facilitate third-party compliance audits

Incident Response and Threat Management:

• Detect, analyze, and respond to security incidents in real-time using advanced monitoring tools
• Continuously improve incident response processes, ensuring timely remediation of security breaches or vulnerabilities
• Work closely with the security operations team to fine-tune detection rules and correlate threat intelligence data to enhance the organization's threat detection capabilities

Security Awareness and Training:

• Drive security awareness initiatives including training campaigns, newsletters, and assessments to keep employees informed about security best practices
• Participate in and support cybersecurity drills and exercises to simulate potential security incidents and enhance team preparedness

Documentation and Reporting:

• Prepare detailed reports, metrics, and dashboards to