Senior Security Engineer at Nexxen

New York, New York, United States

Not SpecifiedCompensation

Senior (5 to 8 years)Experience Level

Full TimeJob Type

UnknownVisa

Advertising, TechnologyIndustries

Expertise in leading Identity & Data Security across Azure AD/Entra ID, AWS, and global data centers
Experience with identity governance (Azure AD/Entra ID, SSO, access reviews)
Proficiency in privileged access management (PAM), including tools like CyberArk or Delinea
Knowledge of AWS IAM at scale, including hardening AWS orgs with SCPs, permission boundaries, and account vending patterns
Skills in enterprise data security (classification, retention, encryption, DLP, key management, tokenization)
Experience with lifecycle automation, access provisioning/deprovisioning, and entitlement workflows
Familiarity with AI analytics for identity risk detection and anomaly detection
Ability to partner cross-functionally with IT, Infrastructure/Network, DB/Data Engineering, and Compliance teams
Understanding of compliance frameworks like SOC 2, SOX, GDPR, and AI usage governance
Based in New York office with hybrid schedule (3 days in office)

Define the roadmap for identity consolidation, PAM rollout, and data security maturity
Establish identity/data control baselines, operational runbooks, and measurable SLAs
Deliver Azure AD consolidation, Conditional Access, MFA, PIM, and Azure AD/AWS SSO integration
Implement PAM (CyberArk or Delinea) with JIT/JEA, session recording, and break-glass procedures
Operationalize access reviews and automate provisioning/deprovisioning and entitlement workflows
Harden AWS orgs across ~30 accounts with SCPs, permission boundaries, and account vending patterns
Standardize data discovery/classification, retention, encryption, key management, and tokenization across platforms
Integrate Apono for database access governance; enforce auditable, least-privilege access
Monitor identity and data compliance; apply AI-driven anomaly detection to reduce dwell time
Partner with Compliance on evidence automation and control mapping for SOC 2/SOX/GDPR
Support incident response for identity/data events; contribute to post-incident improvements
Lead people (implied by people leadership)