Thornburg Investment Management · 6 hours ago
Infrastructure Security Specialist
Thornburg Investment Management is a global investment firm that focuses on delivering strategic solutions for institutions and investors. The Infrastructure Security Specialist is a senior technical role responsible for enhancing the security of the organization’s enterprise systems and infrastructure, ensuring the confidentiality, integrity, and availability of critical platforms and data. This role involves enterprise-level security engineering, systems administration, and collaboration across IT and business teams to create a secure technology environment.
FinanceFinancial Services
Responsibilities
Lead and enhance enterprise-wide server, application, and infrastructure patching programs using Microsoft Endpoint Manager, cloud security services, and vulnerability insights
Manage and optimize SIEM platforms—including log ingestion pipelines, correlation rules, alert tuning, dashboards, and threat detection logic
Oversee MSSP relationships, including escalation quality, SLAs, triage accuracy, and continuous service improvements
Implement, maintain, and enforce secure configuration baselines across enterprise assets, aligned with CIS Benchmarks, NIST CSF, and internal policies
Administer and strengthen Microsoft Purview data protection controls (DLP, Information Protection, insider risk indicators, data lifecycle governance)
Conduct ongoing vulnerability scanning, reporting, remediation follow-up, and risk-based prioritization
Manage enterprise audit log architecture - collecting, normalizing, storing, and reviewing logs from servers, applications, network devices, cloud systems, and security tools
Participate in and often lead incident response activities, including triage, containment, remediation, documentation, and lessons learned
Support and monitor network and perimeter security systems (firewalls, IDS/IPS, secure gateways, VPN, Zero Trust controls)
Coordinate internal and external penetration testing, ensure remediation validation, and maintain risk tracking for findings
Provide advanced technical guidance on secure system architectures, hardening standards, identity and access controls, and privileged access workflows
Support the development and enhancement of automation and infrastructure-as-code approaches to improve security consistency and repeatability
Provide senior-level administration of enterprise infrastructure including servers, virtualization platforms, storage systems, cloud services, and related technologies
Identify process improvement opportunities within Infrastructure Services and help implement automation using scripting (PowerShell, Python, etc.)
Develop and maintain documentation, architectural diagrams, recovery procedures, and operational runbooks
Support business continuity and disaster recovery efforts, including backup oversight, restoration testing, and data resiliency planning
Assist with complex infrastructure incidents, change implementations, upgrade cycles, and cross-team operational support during peak periods or staff absences
Collaborate with team members to ensure a reliable, secure, and high-quality systems environment for the organization
Participate in enterprise security and infrastructure projects from design through execution
Coordinate with vendors and partners for troubleshooting, architecture guidance, managed services, and escalated support
Work closely with cybersecurity, application development, compliance, governance, audit, and business units to align enterprise security posture with organizational strategy
Participate in the Infrastructure team’s on-call rotation and perform additional duties as assigned
Qualification
Required
5 - 7+ years of progressively responsible experience in enterprise infrastructure, system administration, and security operations
Strong experience across Windows Server, Linux, virtualization platforms (VMware/Hyper-V), networking concepts, and cloud services (Azure preferred)
Hands-on experience with SIEM platforms, SOC operations, and MSSP coordination
Demonstrated expertise implementing CIS Benchmarks, secure configuration hardening, and security controls at scale
Experience with Microsoft Purview, Defender security suite, and identity/security components within Microsoft 365 and Azure
Proficiency with vulnerability management tooling, patching orchestration, and security monitoring platforms
Experience managing enterprise backup/restore systems and recovery planning
Familiarity with network and perimeter security technologies such as firewalls, IDS/IPS, VPN, SASE/ZTNA, and network segmentation
Strong scripting abilities (PowerShell required; Python a plus)
Knowledge of security frameworks such as CIS, NIST, ISO 27001, SOC 2, and Zero Trust principles
Strong ethical judgement and integrity aligned to financial services and regulatory environments
Analytical, detail-oriented, and able to manage complex technical environments
Proactive communicator who collaborates effectively across IT and business functions
Demonstrates leadership, ownership, and strong follow-through on operational and project work
Commitment to continuous learning and staying current with evolving security threats and technologies
Preferred
Certifications such as CISSP, Security+, CySA+, GSEC, GCIA, GCIH, Azure Security Engineer, or equivalent experience are strongly preferred
Benefits
Medical, dental, and vision coverage.
Employer 401(k) safe harbor and profit-sharing contributions.
Work/life programs such as flexible work arrangements, flexible paid time off, paid parental leave, employee assistance plan, commuter benefits, student loan repayment program, education reimbursement program
Community involvement opportunities.
Onsite cafeteria.
Onsite fitness center.
Referral Program.
Company
Thornburg Investment Management
Thornburg Investment Management have a clear mission to preserve and increase the real wealth of investors.
H1B Sponsorship
Thornburg Investment Management has a track record of offering H1B sponsorships. Please note that this does not
guarantee sponsorship for this specific role. Below presents additional info for your
reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (2)
2024 (3)
2023 (3)
2022 (5)
2021 (3)
2020 (2)
Funding
Current Stage
Growth StageLeadership Team
Recent News
2025-10-15
Institutional Investor
2025-09-30
Company data provided by crunchbase