About The Position

The Cyber Integration & Orchestration Engineering team, part of DTCC’s CISO organization, designs, implements, and optimizes cybersecurity platforms, integrations, and automation capabilities to strengthen DTCC’s cyber defense program. The Senior Associate enhances security operations through orchestration, threat-response automation, platform integration, and security engineering initiatives. The role works with Cyber Observability, Detection Engineering, Incident Response, Infrastructure, Cloud, and platform teams to deliver scalable security solutions that improve operational efficiency, enterprise visibility, and the speed of incident detection and response. The position also supports cyber resiliency through automation, integration, monitoring, and continuous improvement. DTCC describes its Information Technology group as delivering secure, reliable technology solutions for the global capital markets. The role follows a flexible/hybrid model of three days onsite and two days remote.

Requirements

  • Bachelor’s degree in computer science, cybersecurity, information technology, engineering, or a related discipline.
  • 5 to 8 years of experience in cybersecurity engineering, security operations, security automation, or related technical disciplines.
  • Experience developing automation with scripting languages such as Python, PowerShell, or Bash.
  • Understanding of SIEM, SOAR, threat intelligence, vulnerability management, endpoint security, and network security technologies.
  • Experience working with APIs, data integrations, web services, and automation frameworks.
  • Knowledge of incident-response methodologies and cybersecurity operations processes.
  • Strong analytical and problem-solving skills.
  • Excellent communication and stakeholder-management capabilities.
  • Ability to manage multiple priorities and work effectively in a fast-paced environment.
  • Strong collaboration skills and ability to partner with cross-functional teams.
  • Self-motivated with a continuous-learning mindset.
  • Ability to identify opportunities for operational improvement and automation.
  • Ability to translate business and security requirements into scalable technical solutions.
  • Strong documentation and presentation skills.
  • Passion for cybersecurity, innovation, and operational excellence.

Nice To Haves

  • Experience administering or integrating security platforms such as Google SecOps / Chronicle SIEM & SOAR, Microsoft Sentinel, Abnormal AI Email Security, ExtraHop, ServiceNow, or cloud security platforms (AWS, Azure, GCP).

Responsibilities

  • Design, develop, and maintain integrations between security platforms, including SIEM, SOAR, EDR, IAM, vulnerability management, network security, cloud security, and threat intelligence solutions.
  • Develop and support automated incident-response playbooks and workflows for detection, triage, investigation, and containment.
  • Engineer, implement, and maintain security orchestration capabilities across enterprise security tools and technologies.
  • Configure, optimize, and troubleshoot security platforms and integrations to ensure reliability, performance, and operational effectiveness.
  • Collaborate with Cyber Detection Engineering teams to enhance security use cases, alert enrichment, and response automation.
  • Integrate security telemetry, logs, and threat-intelligence data sources to improve visibility and detection coverage.
  • Partner with infrastructure, cloud, and application teams to onboard systems and ensure adherence to cybersecurity standards and monitoring requirements.
  • Support implementation and administration of SOAR, SIEM, and security analytics solutions.
  • Develop APIs, scripts, and automation solutions using technologies such as Python, PowerShell, REST APIs, and cloud-native services.
  • Test, validate, and tune automated workflows and security controls.
  • Create and maintain technical documentation, operational procedures, playbooks, and architecture diagrams.
  • Participate in cybersecurity projects, technology evaluations, proof-of-concepts, and production deployments.
  • Support cyber resiliency initiatives through automation, integration, monitoring, and continuous improvement.
  • Provide engineering support during security incidents, including automation enhancements and rapid integration of response capabilities.

Benefits

  • Competitive compensation, including base pay and annual incentive.
  • Comprehensive health and life insurance and well-being benefits, based on location.
  • Pension and retirement benefits.
  • Paid time off and personal/family care, and other leaves of absence to support physical, financial, and emotional well-being.
  • Flexible/hybrid work model of three days onsite and two days remote.
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service