MSIG USA · 10 hours ago
Senior Cybersecurity Engineer
MSIG USA is the US-based subsidiary of MS&AD Insurance Group Holdings, Inc., a global leader in commercial insurance solutions. The Senior Cybersecurity Engineer will support the Information Security Officer in designing, developing, and implementing cybersecurity and IT security solutions, managing various security infrastructures, and ensuring compliance with regulatory requirements.
FinanceProperty & Casualty InsuranceFinancial ServicesInsurance
Responsibilities
Identify, assess, and mitigate risks to ensure data and system security and integrity. Manage and maintain the vulnerability and patch management program
Ensure compliance with regulatory requirements and industry standards, including PCI, NYDFS, and NIST
Collaborate with the Information Security Officer to develop and implement robust security architectures and designs to protect against cyber threats
Lead and execute cybersecurity projects from conception to completion, ensuring effective security measures are deployed
Monitor and manage IPS/IDS managed services, both internal and outsourced
Maintain and update a comprehensive information security program that includes policies and processes to minimize risk and ensure data integrity and availability
Evaluate and implement tiered defensive posturing systems and policies to defend against malware threats
Create and maintain information security policies, standards, controls, and procedures to comply with evolving laws and regulations
Use a risk-based approach to secure applications, databases, or infrastructure based on technology and business needs
Manage testing and vulnerability analysis, including third-party scanning, pen testing, and network security providers
Oversee the Identity and Access Management Platform – OKTA and Azure AD
Administer Illumio and Zscaler for micro-segmentation and zero trust security models to reduce attack surfaces and limit lateral movement within the network
Conduct phishing simulation training programs to educate employees on identifying and avoiding phishing attacks
Resolve security-related cases escalated by Level 1 Helpdesk
Handle proxy issues requiring manufacturer intervention for final resolution
Maintain documentation and continuously improve existing infrastructure, network/security, and audit standards
Manage and maintain technologies such as antivirus, encryption systems, firewalls, access, and authentication technologies
Manage off-shore support resources and vendors supporting email and security applications
Qualification
Required
Bachelor's degree in computer science or a related field
5 to 7 years of technical experience in a security environment
Over 3 years of experience with Security Information and Event Management (SIEM) tuning and reporting
5 to 7 years of experience in managing security for users, platforms, and devices, including authentication, access controls, authorization, and integration of enterprise directories with other systems in large, complex environments
Proficiency with enterprise-class security products such as Identity Access Management, Web Access Management, and Single Sign-On
Strong knowledge of common security frameworks and regulations, with substantial experience in cloud environments
Expertise in security-related topics, including authentication, entitlements, identity management, data protection, data leakage prevention, validation checking, encryption, the principle of least privilege, software attack methods, secure data transfer/storage, etc
Excellent verbal and written communication skills, with the ability to convey information clearly to team members, stakeholders, and senior managers
Deep understanding of protocols such as TCP/IP, HTTP, and TLS/SSL at OSI network layers
Experience with security tools and creating detailed documentation
Experience managing vendor relationships with security and technology manufacturers, consultants, or VARs, including negotiating contracts and coordinating activities related to hardware, software, telecommunications, support, and training vendors
CompTIA Security+ - Required
CISA - Required
Proficiency with Microsoft Office Suite, MS Project
Benefits
Healthcare and Retirement Benefits
Comprehensive medical, dental, and vision coverage
401(k) with a generous employer match and profit-sharing contribution
Wellness incentive program
Life and accidental death and dismemberment (AD&D) insurance
Flexible spending programs
Short-term and long-term disability plans
Paid time off program
Paid charitable leave
Paid parental leave
Tuition reimbursement program
Personal insurance (auto/homeowners) discounts
Company
MSIG USA
MSIG USA is the partner that businesses rely on for creative, customized insurance solutions.
Funding
Current Stage
Growth StageRecent News
2025-11-25
2025-09-30
Company data provided by crunchbase