Senior Cybersecurity Design Architect

Jane Street Group, LLC has multiple openings for a Senior Cybersecurity Design Architect in New York, New York.

The position duties are as follows: Serve as a technical security leader and cross-functional coordinator, translating security requirements into practical implementations and leading security initiatives from assessment through implementation. Day-to-day duties include: 

• Conduct threat modeling assessments, security audits and reviews of systems, processes, third-party integrations and applications across Jane Street; 
• Lead security initiatives across cross-functional teams, managing project timelines and stakeholder expectations while defining security requirements and implementing new security controls and monitoring solutions; 
• Act as primary cyber liaison for multiple teams including Unified Communications, Physical Security, MacOS Team, Workplace Services, Creative Engagement, IT Movers Adders Changers; 
• Drive internal process improvements including interteam process enhancements and threat modeling methodology refinements; 
• Perform penetration testing on internal systems and applications;
• Participate in security incident response and remediation; and 
• Mentor and train junior cybersecurity team members and engineers across the firm. 

The position requires a 3 or 4 year Bachelors degree in Computer Science, Information Security, Cybersecurity, or related technical field or foreign equivalent plus 4 years of progressively responsible experience as a cybersecurity engineer, cybersecurity architect, or similar occupation.  Experience must include: 

• 2 years of experience performing threat modeling, penetration testing, and vulnerability assessments for systems built with Python and OCaml;
• 2 years of experience managing projects and leading cybersecurity initiatives across multiple, global teams, including experience in architecture reviews and application security;
• 2 years of experience assessing security of low-latency trading systems; 
• 2 years of experience building security frameworks, including experience in application security and SDLC, working closely with engineers to secure custom-built systems;
• All technical requirements for this role may be subject to employer conducted testing to assess minimum proficiency.

Part time telecommuting may be permitted with manager approval.

Ref. SSAEP26