Senior Security Engineer

Group 1001 is a consumer-centric, technology-driven family of insurance companies on a mission to deliver outstanding value and operational performance by combining financial strength and stability with deep insurance expertise and a can-do culture. Group1001’s culture emphasizes the importance of collaboration, communication, core business focus, risk management, and striving for outcomes. This goal extends to how we hire and onboard our most valuable assets – our employees.

Why This Role Matters:

As a Senior Cybersecurity Engineer at Group 1001, you will play a critical role in safeguarding our organization by proactively addressing emerging threats, implementing robust security measures, and providing strategic leadership to ensure the highest levels of cybersecurity resilience and protection for our digital assets and operations. You will be responsible for designing, implementing and maintaining secure systems, and spearheading strategic initiatives that protect our data and services from evolving cyber risks. You will work closely with multiple teams across the organization to ensure security is seamlessly integrated into our processes, technologies, and culture. You consistently uphold a standard of accountability, both for yourself and those around you, ensuring the steady delivery of mission-critical results and understand the high standards of leading financial institutions. This role requires a deep understanding of security principles, critical thinking skills, and the ability to navigate complex environments.

How You'll Contribute:

• Collaborate with cross-functional teams to design and implement secure architecture and solutions, ensuring the confidentiality, integrity, and availability of data.
• Ensure availability of critical systems that enable the Cybersecurity mission, including SIEM, SOAR, and EDR solutions.
• Own the design, configuration, and ongoing optimization of the SIEM platform, including data normalization, and parsing, and log ingestion.
• Configure, deploy, and maintain EDR solutions across heterogeneous environments (endpoints, servers, and cloud workloads), including policy design, tuning, agent deployment strategies, and integration with SIEM/SOAR for automated response.
• Develop, implement, and maintain cloud security strategies, policies, and best practices for public cloud platforms (e.g., AWS, Azure, GCP).
• Continuously monitor new and evolving security threats, vulnerabilities, and industry trends.
• Identify areas for improvement in security processes, policies, and technologies and drive initiatives to enhance security effectiveness.
• Assume accountability for projects, propose innovative solutions, and actively steer them to successful completion.

What We're Looking For:

• Bachelor's degree in Computer Science, Information Security, or related academic field.
• 7-10 years of professional experience in information security, with focus on the financial sector.
• Strong knowledge of public cloud platforms (e.g., AWS, Azure, GCP) from an infrastructure and development aspect and their related security features.
• Experience working with cloud native solutions such as AWS Guard Duty, Cloudtrail, Lambda, IAM as well as related capabilities in Azure, GCP/Google Security Center.
• Understanding of industry security frameworks, standards, and best practices (e.g., NIST, ISO, CIS).
• Experience with broad range of security tools and technologies (e.g., SIEM, CASB, CSPM, EDR, IDS/IPS, DLP, WAF).
• Hands-on experience engineering, administering, and tuning SIEM platforms (e.g., data onboarding, performance optimization, integration with other security tools).
• Hands-on experience deploying, configuring, and managing EDR solutions at enterprise scale, including policy design, tuning for noise reduction, and integration into incident response workflows.
• Experience in modern coding languages such as Python, particularly for automation of security platform operations, health monitoring, and integration tasks.
• Strong communication and collaboration skills, with the ability to work closely with engineering, operations and infrastructure teams.
• Familiarity with compliance standards and regulations.
• Creativity and critical thinking with the ability to work both independently and collaboratively in a fast-paced environment.
• Be able to serve as a mentor or subject matter expert to other members within the organization, particularly in the areas of SIEM engineering, endpoint security, and logging strategy.

Compensation:  

Our compensation reflects the cost of labor across several U.S. geographic markets. The base pay for this position ranges from $210,000/year