Global Security Operations Lead

Cantor Fitzgerald’s Global Information Security team is seeking a highly skilled Global Security Operations Lead with strong leadership capabilities and technical expertise in endpoint detection response, inventory discovery, and SIEM tools. 

The Global Security Operations Lead will lead a global technical team of ~10 resources in New York, London, and Hyderabad to strengthen the company’s security posture by implementing and optimizing security operations and leading incident response efforts. 

The ideal candidate will have a deep technical understanding of cybersecurity threats, strong hands-on experience with key security tools, ability to perform advanced threat analysis, and integration with MSSP providers. 

This role is part of an information security program and reports to the Chief Information Security Officer.  They will interact with senior technology and business leadership across all Cantor Fitzgerald business units.  
 

Role: Global Security Operations Lead

Industry Type: Financial Services, Real Estate 

Department: Information Security

Employment Type: Full Time, Permanent

Experience: 12+ years

Location: New York, NY

Key Responsibilities

Security Operations Leadership 

• Oversee the security operations work queue including volumes, critical alerts, and items that are at an impasse. 
• Assist team with addressing alerts by providing guidance or resolving if technical resources are unavailable.
• Manage the relationship and interface with management and technical account team at key third party providers.

Security Solution Delivery

• Oversee the deployment, configuration, and ongoing management of security platforms including EDR (endpoint detection and response), endpoint discovery, digital certificates, vulnerability scanning, and SIEM.
• Design and implement automated response workflows using integrated capabilities within security platforms.
• Develop and manage AI driven security platform capabilities to help automate and enhance team capabilities. 
• Identify gaps in security platforms to improve defense-in-depth controls, proactively manage the renewal of solutions in advance of end-of-life.

 

New Business / Product Integration

• Support the transition and migration of new businesses and products the firm has acquired to ensure they are incorporated into security operations and response.
• Ensure these new businesses and products are fully incorporated in asset management, vulnerability management, and incident response.

 

Threat Analysis & Response

• Maintain security incident response documentation, participate in table-top exercises
• Lead incident response efforts, including forensic analysis, root cause identification, containment, eradication, and recovery.
• Conduct advanced threat hunting activities using EDR and SIEM technologies.
• Maintain knowledge of the latest threats, vulnerabilities, and mitigation techniques.

 

Vulnerability Management 

• Perform regular vulnerability assessments using Rapid 7 and Tanium to identify risks and provide actionable recommendations.
• Collaborate with IT and application teams to ensure timely remediation of vulnerabilities.
• Develop metrics and reports that track the status of vulnerabilities and patching activities across the enterprise.

 

Security Architecture & Best Practices

• Work closely with IT infrastructure and development teams to design secure systems, networks, and applications.
• Provide expert advice on cybersecurity best practices and security standards
• Assist in developing and refining security architectures
• Perform thorough analysis of security data to help inform security and team direction.

 

Mentoring & Knowledge Sharing

• Mentor junior security team members, providing guidance on incident response, threat hunting, and tool optimization.
• Conduct technical training sessions and knowledge-sharing workshops on the effective use of security platforms.
• Stay up to date with new features, releases, and best practices ensuring the team is leveraging the latest capabilities.
  
   

Compliance & Auditing

• Support the organization’s compliance efforts by ensuring security controls meet regulatory and industry standards (e.g., NIST, ISO 27001, etc.).
• Participate in security audits and assessments to verify compliance and identify a