Senior Cybersecurity Engineer

Larson Network Services, LLC•St. Louis, MO

About The Position

Larson Financial Holdings LLC is seeking a Senior Cybersecurity Engineer to build and drive cybersecurity initiatives with an ownership mindset. The role protects the organization’s information systems, data, and infrastructure by developing and improving security tools, automation, and policies, including using AI tools to connect security platforms and create monitoring dashboards. As part of the Larson Technology Services team, the engineer supports day-to-day cybersecurity operations, including threat monitoring, incident response, compliance, and security awareness. The role researches and implements security improvements and contributes to broader technology operations as needed in a collaborative environment.

Requirements

Bachelor's degree in Cybersecurity, Computer Science, Information Systems, or a related field, or equivalent professional experience.
At least 8 years of hands-on cybersecurity engineering experience, including at least 3 years at a senior or specialist level.
Proven experience owning security compliance work aligned with frameworks such as NIST CSF, NIST SP 800-53, ISO 27001, SOC 2, or CIS Controls, including audit preparation and evidence management.
Deep experience architecting, deploying, and optimizing security tools such as EDR/XDR and vulnerability management platforms, including tuning, policy design, and integration.
Advanced proficiency building automation and tooling with scripting languages such as PowerShell and Python.
Strong experience with SIEM and detection engineering, including developing and tuning detection rules, correlating data sources, and mapping detections to frameworks such as MITRE ATT&CK.
Experience applying AI tools and APIs to connect systems, automate workflows, and build dashboards or reports, with sound judgment about data handling and risk.
Extensive hands-on experience designing and securing Microsoft Azure and Entra ID environments, including Conditional Access, identity governance, privileged access management, and cloud security posture.
Experience authoring and maintaining security policies, standards, and procedures, and driving their adoption across business and technical teams.
Experience running phishing simulation platforms and security awareness programs, including measuring effectiveness and reporting outcomes.
Demonstrated ability to lead incident investigations and response and communicate findings and risk clearly to technical teams, executives, and non-technical audiences.
Ability to evaluate security solutions, build business cases, and present well-supported recommendations to management and leadership.
Ability to independently manage competing priorities, balancing strategic projects with operational responsibilities in a fast-paced environment.
Experience mentoring and providing technical guidance to technology staff.

Nice To Haves

Relevant certifications, such as CISSP, CISM, CISA, GCIH, CompTIA Security+, CEH, Microsoft SC-200, or AZ-500.
Experience with security architecture reviews, risk assessments, or third-party and vendor risk management.
Experience with infrastructure as code or DevSecOps practices.
Familiarity with financial services regulatory requirements, such as SEC and FINRA cybersecurity expectations, Regulation S-P, and GLBA.

Responsibilities

Design and build security controls across endpoint, identity, network, and cloud environments, including Microsoft Azure and Entra ID.
Research and evaluate security tools; develop recommendations, business cases, proofs of concept, and vendor assessments; and deploy and configure selected tools.
Build detection logic, automation, and response playbooks.
Perform threat modeling and security reviews for new systems, changes, and projects, and recommend mitigations.
Develop and improve security baselines and hardening standards.
Integrate security tools to automate work such as phishing triage, phishing campaign reporting, and vulnerability ticketing.
Use AI tools, APIs, and low-code automation to connect security and SaaS platforms and consolidate their data.
Build and maintain security monitoring dashboards and reports, including vulnerability, phishing, incident, and compliance metrics.
Use AI tools according to organizational policy and data-handling requirements, and recommend safeguards for AI use in the security environment.
Monitor, investigate, and respond to security alerts and incidents, including phishing emails, malware alerts, and unauthorized access attempts.
Administer and maintain security tools, including endpoint detection and response (EDR) and vulnerability scanners.
Remediate security incidents, conduct follow-up analysis, document findings and actions, and recommend process improvements.
Manage staff-submitted phishing reports; coordinate containment and communication; and tune detections and build automation to reduce false positives and manual triage.
Perform regular vulnerability assessments and work with system owners and end users to prioritize and remediate identified risks.
Contribute to planning and rolling out cybersecurity objectives, tools, and initiatives.
Plan and run recurring phishing simulation campaigns, including setup, scheduling, and distribution.
Analyze phishing campaign results and identify departments or individuals needing additional training or follow-up.
Develop and deliver security awareness communications, training materials, and coaching based on simulation outcomes and leadership direction.
Maintain records of simulation results and awareness training completion for reporting and continuous improvement.
Recommend improvements to security awareness content, success metrics, and risk-based targeting.
Support day-to-day efforts to achieve and maintain compliance with applicable security controls.
Conduct periodic control assessments, gather evidence, and work with stakeholders to close compliance gaps.
Draft and maintain security policies, standards, procedures, risk assessments, and control inventories.
Map security controls to applicable frameworks and recommend control improvements.
Conduct risk assessments and recommend remediation priorities.
Support internal and external audits and regulatory examinations by preparing evidence packages and responding to inquiries.
Identify emerging risks and recommend policy or control improvements.
Provide assigned systems administration support, including user account management, access provisioning, Conditional Access policies, and endpoint configuration.
Assist with service desk escalations requiring elevated access or advanced troubleshooting.
Collaborate with Larson Technology Services colleagues on infrastructure projects, applying a security-first perspective to system design and change management.