Lead Cybersecurity Engineer (Breach & Attack Simulation)

Are you ready to make an impact at DTCC? Do you want to work on innovative projects, collaborate with a dynamic and supportive team, and receive investment in your professional development? At DTCC, we are at the forefront of innovation in the financial markets. We are committed to helping our employees grow and succeed. We believe that you have the skills and drive to make a real impact. We foster a thriving internal community and are committed to creating a workplace that looks like the world that we serve. The Information Technology group delivers secure, reliable technology solutions that enable DTCC to be the trusted infrastructure of the global capital markets. The team delivers high-quality information through activities that include development of essential, building infrastructure capabilities to meet client needs and implementing data standards and governance. Pay and Benefits: Competitive compensation, including base pay and annual incentive Comprehensive health and life insurance and well-being benefits, based on location Pension / Retirement benefits Paid Time Off and Personal/Family Care, and other leaves of absence when needed to support your physical, financial, and emotional well-being. DTCC offers a flexible/hybrid model of 3 days onsite and 2 days remote (onsite Tuesdays, Wednesdays and a third day unique to each team or employee). The Impact you will have in this role: The Cyber Security Engineering Senior Associate for Breach and Attack Simulation (BAS) supports the design, execution, and continuous improvement of adversary simulation and security control validation activities. Working under the direction of the Associate Director, the role safely emulates relevant threat behaviors, validates preventive and detective controls, documents findings, and partners with security and technology teams to improve detection coverage, response readiness, and cyber resilience across on-premises, cloud, and hybrid environments. Specific Responsibilities • Execute BAS scenarios and adversary emulation exercises in accordance with approved scope, rules of engagement, change requirements, and safety controls. • Translate threat intelligence, organizational risks, and control requirements into repeatable simulation scenarios that safely test enterprise defenses. • Develop, configure, test, and maintain BAS platform content, attack scenarios, schedules, integrations, automation, and evidence collection. • Map simulation activities, techniques, and findings to MITRE ATT&CK and other relevant frameworks to support consistent control coverage analysis and reporting. • Validate preventive and detective controls across identity, endpoint, network, application, cloud, and data environments, and confirm whether expected alerts and response workflows operate as designed. • Analyze exercise results to identify control weaknesses, telemetry gaps, missed detections, configuration issues, and response-process improvement opportunities. • Create clear technical findings, risk statements, supporting evidence, and recommended remediation actions; track assigned issues through validation and closure. • Partner with SIEM, SOC, threat intelligence, endpoint, network, cloud, vulnerability management, and security engineering teams to improve detection logic, response playbooks, tuning, and control effectiveness. • Participate in purple team engagements and coordinate technical validation with red team, penetration testing, control assurance, and platform teams. • Perform retesting after remediation to verify that control changes address the identified gap without creating unintended operational impact. • Develop and maintain dashboards and metrics for scenario execution, control performance, detection coverage, remediation status, and recurring findings. • Prepare technical reports, exercise readouts, implementation procedures, test plans, and supporting evidence for stakeholders, audit, regulatory, and control assurance requests. • Automate repeatable BAS tasks through scripting, APIs, and platform integrations while maintaining version control and appropriate review and approval. • Monitor adversary tactics, techniques, and procedures and emerging attack trends to recommend relevant updates to the BAS scenario library and testing priorities. • Contribute to BAS procedures, playbooks, templates, standards, and continuous improvement initiatives to increase program repeatability, scalability, and maturity. • Escalate unsafe conditions, unexpected system impact, or material control gaps promptly and support incident response activities when required. • Fulfill additional cybersecurity engineering, threat defense, control validation, and special project responsibilities as assigned. Talents Needed for Success: • At least 5 years of cybersecurity experience, including relevant work in security engineering, offensive security, penetration testing, detection engineering, incident response, threat defense, or control validation. • Bachelor's degree in computer science, cybersecurity, information technology, engineering, or a related discipline; equivalent practical experience may be considered. • Relevant certifications such as OSCP, GPEN, GCIH, GCIA, CRTO, CEH, CISSP, CCSP, or cloud-provider security certifications are preferred. We are an equal opportunity employer and value diversity at our company. We do not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will ensure that individuals with disabilities are provided reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment. Please contact us to request accommodation.