Senior Security Engineer

About the role:

Working hours: Aligned to US Eastern business hours (approximately 09:00 to 18:00 ET), Monday to Friday. 

We are looking to hire a Senior Security Engineer to own GLG's threat detection and incident response capability during US business hours. This is a senior individual contributor role, reporting to Nick Franzi. The successful candidate will be the firm's primary subject matter expert for detection engineering, security operations, and incident response: responsible for ensuring threats are identified early, investigated thoroughly, and resolved with durable outcomes. 

This individual will build and maintain the systems, processes, and playbooks that underpin GLG's operational security posture. They will work closely with IT, engineering, legal, and business teams across the firm, as well as dedicated platform SMEs within the Information Security team, and will serve as the primary point of escalation for active security events during US business hours. 

What you'll do:

Threat detection and incident response 

• Operate and contribute to the improvement of GLG's detection capability across SIEM, EDR, and email security platforms during US business hours: working with platform SMEs to tune detection logic, surface threats early, and maintain high signal fidelity. 
• Lead incident response end to end within US operational coverage: scope, contain, eradicate, and document. Produce post-incident reviews that drive lasting remediation. 
• Author and maintain response playbooks that enable consistent, decisive action across incident scenarios, coordinating handoffs with global team members where applicable. 
• Serve as the firm's primary US-hours escalation point for active security events. 

Vulnerability and exposure management 

• Execute vulnerability scanning across endpoints, servers, and cloud assets; apply risk-based prioritization and drive remediation with US-based and global asset owners to defined SLAs. 
• Track and report on the firm's exposure posture over time, translating technical findings into actionable reporting for leadership. 
• Contribute to the firm's external attack surface management program. 
• Serve as the security reviewer for new services, platforms, and major changes: assess designs, model