Head of Security Engineering

DriveWealth

. Own the security engineering strategy, roadmap, and delivery across the product platform and corporate environment .

Posted 10/1/2026full-timeUnited StatesLead💰 $220,000 - $250,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in security engineering strategy, including AWS and Kubernetes security, identity and access management, and regulatory compliance. Proven ability to lead teams, manage security platforms, and deliver measurable improvements in security posture across complex environments.

Highest-signal resume keywords

Security Engineering StrategyAWS SecurityKubernetes SecurityIdentity And Access ManagementTeam Leadership

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Security EngineeringInfrastructure EngineeringPythonJavaTerraformAPIs SecuritySecurity TestingIncident EngineeringAutomationThreat Modeling

Soft Skills

CommunicationInfluencing Technical DecisionsCoachingPerformance ManagementCollaboration

Tools & Technologies

SIEMSOAROktaJumpCloudDLPMonitoring PlatformsTelemetry PipelinesRemote Access/SASECloud SecurityEndpoint Security

Certifications & Qualifications

AWS CertificationsKubernetes CertificationsSecurity Certifications

Industry Keywords

SECFINRABrokerageTrading InfrastructureRegulated Financial Services

Tech Stack

Tools & technologies

AWSCloudDynamoDBEC2JavaKubernetesMacOSPythonTerraform

About the role

Key responsibilities & impact

Own the security engineering strategy, roadmap, and delivery across the product platform and corporate environment
Report to the Chief Information Security Officer
Build and lead the Security Engineering team; hire, coach, develop, and manage performance
Define multiyear strategy and quarterly roadmaps aligned with business priorities and risk appetite
Manage backlogs, budgets, vendors, and dependencies; communicate progress, tradeoffs, and residual risks
Embed threat modeling, architecture reviews, security testing, and secure design into development and CI/CD
Secure AWS, EKS, EC2, DynamoDB, Kubernetes services, and co-located trading infrastructure
Mature identity, access governance, endpoint, remote access, DLP, communications, and SaaS security
Build scanning and remediation capabilities across cloud, on-premises, code, dependencies, containers, and infrastructure
Build, integrate, and maintain SIEM, SOAR, endpoint security, monitoring, investigation, exposure management, and response platforms
Own security data pipelines, including coverage, quality, enrichment, availability, retention, maintenance, and support procedures
Deliver detection and response automation and provide incident engineering and investigation support
Implement SEC and FINRA regulatory controls, including SEC Rule 17a-4 controls
Build data discovery, classification, access control, encryption, retention, and secure deletion capabilities
Automate control validation and evidence collection; support audits and regulatory examinations
Drive remediation of technical findings and partner with Engineering, IT, Risk, Compliance, Legal, GRC, and Security Operations

Requirements

What you’ll need

10+ years of relevant security, software, or infrastructure engineering experience, including 4+ years directly managing technical teams
Demonstrated success owning a security engineering roadmap and delivering measurable improvements across production and corporate environments
Expertise in AWS and Kubernetes security, with practical experience securing APIs and modern software delivery pipelines
Strong working knowledge of identity and access management, macOS and Windows endpoint security, remote access/SASE, network security, and SaaS security
Experience with Okta, JumpCloud, or comparable platforms
Experience building and maintaining security platforms, telemetry pipelines, and automation used by security operations teams
Ability to review code and infrastructure changes and contribute engineering solutions using Python, Java, or a comparable language
Experience with infrastructure-as-code tools such as Terraform
Ability to balance security, reliability, developer productivity, and cost
Ability to influence technical decisions and communicate clearly with executives, engineers, and business partners
Experience delivering security capabilities in regulated financial services or another environment with demanding availability, data protection, and audit requirements
Bachelor’s degree in a related field or equivalent practical experience
Applicants must be authorized to work for any employer in the U.S.; no current or future visa sponsorship
Relevant security, AWS, or Kubernetes certifications are a plus
Brokerage, trading infrastructure, and SEC/FINRA experience are preferred

Benefits

Comp & perks

Competitive compensation
Equity
401(k) match
Medical insurance
Dental insurance
Vision insurance
Disability insurance
Paid Parental Leave
Wellness reimbursement
Company-provided phone
Personal development allowance
Generous Paid Time Off (PTO)
Observed holidays
Bonus eligibility
Heavily subsidized benefits and perks
Hybrid office schedule for New York and Chicago-based employees
Fully remote work for Austin, Dallas, Denver, Miami, San Francisco, or Seattle-based employees, with occasional onsite office visits