Senior Security Engineer, Cybersecurity

Fubo•New York, NY

9h•$160,000 - $200,000•Hybrid

About The Position

This role is a New York City based HYBRID position. Candidates must be located in NYC, and willing to come into the office on a hybrid basis, three times a week (Tuesday, Wednesday, Thursday). We are seeking a Senior Security Engineer with deep expertise in Zero Trust Networking concepts and proven experience implementing Zero Trust architectures across enterprise environments. The ideal candidate will possess strong hands-on experience securing remote access, endpoint security, BYOD environments, identity federation, authentication systems, and privileged access management. This role requires a highly motivated security engineer who can contribute to Zero Trust initiatives across planning, execution, and governance while driving projects with urgency and accountability. The successful candidate will work cross-functionally with Infrastructure, Cloud, IAM, IT, and Security Operations teams to modernize enterprise security controls and reduce organizational risk.

Requirements

7+ years of experience in Security Engineering, Network Security, or Infrastructure Security roles
Demonstrated experience implementing Zero Trust architectures across enterprise environments
Strong expertise in: Secure remote access technologies, Endpoint security and BYOD security models, Identity federation and authentication protocols (SAML2, OAuth2, OIDC), Privileged Access Management (PAM), Cloud security and IAM, Zero Trust architecture and governance
Hands-on experience with: Okta and Identity Provider (IdP) integrations, SentinelOne Endpoint Security, AWS IAM, Google Cloud Platform IAM, VPN and secure access technologies
Experience developing and updating security standards, policies, and operational procedures
Strong project ownership skills with the ability to execute initiatives with urgency and follow-through
Excellent communication, analytical, and cross-functional collaboration skills

Nice To Haves

Experience with Wiz Security
Experience with SIEM platforms
Experience with JAMF
Experience with Mobile Device Management (MDM) platforms
Experience with ZTNA, SASE, or Software Defined Perimeter technologies
Industry certifications such as: CISSP, CCSP, AWS Security Specialty, GIAC certifications
Strong balance of strategic thinking and hands-on technical execution
Ability to lead initiatives independently in fast-paced environments
Experience collaborating across Security, IT, Infrastructure, and Engineering teams.
Strong understanding of modern attack methods targeting identity, endpoints, and remote access infrastructure

Responsibilities

Design, implement, and govern comprehensive Zero Trust architecture across enterprise cloud, hybrid, and on-premises environments
Lead enterprise initiatives to modernize legacy perimeter-based security models using Zero Trust principles and secure remote access technologies
Develop and maintain cybersecurity policies, standards, and governance frameworks aligned with evolving Zero Trust security requirements
Partner with cross-functional teams to drive planning, execution, and operationalization of Zero Trust initiatives
Audit cloud, VPN, and on-premises systems to ensure secure configuration and adherence to Zero Trust standards
Review and enhance identity provider (IdP) configurations, federation services, and authentication workflows to protect against sophisticated attacks
Implement and manage secure authentication and federation technologies including SAML2, OAuth2, and OpenID Connect
Design and support least-privilege access models and Privileged Access Management (PAM) solutions for critical systems and administrative accounts
Collaborate with IAM teams to strengthen access governance and identity lifecycle management
Oversee enterprise endpoint security posture across corporate and BYOD environments
Partner with IT teams to define and enforce required endpoint configurations, software patch levels, and compliance standards
Implement and support Mobile Device Management (MDM) solutions and device compliance policies
Drive initiatives around endpoint protection, device trust, and continuous posture validation
Secure enterprise workloads and identity configurations across AWS and Google Cloud Platform (GCP) environments
Implement cloud-native security controls and IAM best practices across multi-cloud environments
Assist with secret management, API security, and secure service-to-service authentication practices
Support secure connectivity strategies for remote users, cloud workloads, and enterprise applications
Participate in incident response planning, investigations, and remediation efforts
Support monitoring and detection initiatives through SIEM and endpoint telemetry integrations
Assist in identifying and mitigating security gaps related to identity compromise, lateral movement, and unauthorized access