Associate Principal, Security Engineering

📋 Description

• • Own and operate the privileged access management (PAM) ecosystem that safeguards OCC’s most sensitive data and systems, providing 24×7 support for CyberArk, HashiCorp Vault, PKI, and related secrets-management platforms. You will be the last line of defense when critical credentials are at risk and the first call when a hot-fix or break-fix is needed.
• • Serve as the organization-wide subject-matter expert on secrets lifecycle, privileged access architecture, and “security-as-code” principles. You will design guardrails, write policy-as-code modules, and evangelize secure-by-default patterns that scale across on-prem, hybrid, and multi-cloud environments.
• • Drive continuous improvement of the PAM user experience by automating routine tasks, integrating self-service workflows, and embedding AI-driven anomaly detection that shortens mean-time-to-detect (MTTD) and mean-time-to-remediate (MTTR) from hours to minutes.
• • Partner with Development, Cloud, and DevOps teams to embed PAM controls into CI/CD pipelines (Terraform, Ansible, Jenkins) without slowing release velocity. You will review pull requests, provide threat-model feedback, and ensure every secret is vaulted, rotated, and audited automatically.
• • Architect long-term roadmaps for certificate management, HSM utilization, and zero-trust privileged access. You will evaluate emerging technologies—ranging from confidential computing to AI security agents—and translate them into phased, risk-based implementation plans.
• • Maintain operational integrity through disciplined lifecycle management: patching, version upgrades, capacity planning, performance tuning, and rigorous alignment with OCC Security standards, SEC, CFTC, and Federal Reserve guidance.
• • Provide tier-3 escalation support, root-cause analysis, and post-incident reviews for all PAM-related events. You will author runbooks, mentor junior engineers, and build a culture where operational excellence is measured, celebrated, and continuously improved.
• • Champion a “shift-left” security mindset by delivering brown-bag sessions, technical blogs, and hands-on labs that empower developers to handle secrets safely and reduce ticket volume.
• • Influence enterprise risk decisions by translating technical findings into business-impact narratives for senior leadership, audit committees, and regulators. Your dashboards will become the single source of truth for privileged-access risk exposure.
• • Experiment with AI coding agents (OpenAI Codex, Claude Code, Gemini CLI) to accelerate secure development, automate policy validation, and generate synthetic test data—turning cutting-edge research into production-grade capabilities.
• • Collaborate with Identity & Access Management, Incident Response, and Threat Intelligence teams to ensure privileged access controls adapt in real time to new attack vectors, insider threats, and geopolitical risk events.
• • Contribute to OCC’s mission as the world’s largest equity-derivatives clearing organization, where every security control you build underpins the stability of global financial markets and protects millions of investors.