This role is being created to backfill a resigning Senior Associate, Information Security with 3.5 yrs of experience at BetaNXT, and it is being redefined with a sharper mandate. The Lead Associate / Cybersecurity Engineer will own day-to-day execution of BetaNXT's Vulnerability & Exposure Management program — the single highest-priority function in this role — while also contributing to PKI/Certificate Lifecycle Management and Data Loss Prevention (DLP) / Data Classification initiatives. This is an execution and delivery role as much as a technical one: success depends on the ability to organize, prioritize, and personally drive remediation work across engineering teams that do not report to this person.
We are looking for someone with genuine passion, ambition — someone who treats this role as a launchpad to grow into broader security engineering and program leadership responsibility, not a fixed job description.
- Serve as the day-to-day counterpart to DXC's Vulnerability Management lead, running a recurring, evidence-based triage cadence across findings from Qualys VMDR/TruRisk, GitLab Ultimate (SDLC/dependency findings), and CyCognito (external attack surface).
- Segment and prioritize triaged findings by business unit (Beta, Maxit, Mediant, Delta Data), applying asset criticality, exploitability signals (EPSS/KEV), and business context rather than raw severity counts alone.
- Build remediation plans with each BU's technology and development engineering teams, and personally drive them to closure — this requires the judgment and persistence to negotiate realistic timelines and the persuasion skills to keep remediation moving with teams that have competing priorities and no reporting relationship to this role.
- Apply project/delivery-management discipline to the remediation portfolio: maintain trackers and burn-down views, flag at-risk items early, and escalate clearly and factually to BU and technology leadership when a commitment is slipping.
- Contribute to the ongoing evolution of BetaNXT's Risk-Based Vulnerability Management (RBVM) / Continuous Threat Exposure Management (CTEM) program, including per-BU scorecards and monthly VM governance reporting to CLO/GRC leadership.
- Support the operation and continuous improvement of enterprise PKI and Certificate Lifecycle Management (CLM) tooling (e.g., Venafi), including issuance, automated renewal, and revocation workflows.
- Maintain an accurate certificate inventory across on-prem and cloud environments; proactively identify and remediate certificates that are expired, expiring, or improperly configured before they cause a production or client-facing incident.
- Coordinate with DXC and internal infrastructure owners on certificate-related change work and the broader CLM ownership transition.
- Support configuration, tuning, and expansion of DLP controls (e.g., Microsoft Purview) across email, endpoint, and cloud channels.
- Assist with data classification efforts, partnering with BU and compliance stakeholders to identify, label, and appropriately protect sensitive client and company data.
- Investigate DLP alerts and turn recurring patterns into concrete policy or control refinements that reduce noise without reducing coverage.
- As bandwidth allows, streamline and document InfoSec processes, runbooks, and SOPs — starting with VM, PKI/CLM, and DLP workflows — so institutional knowledge is captured and transferable rather than held by one person.
- Participate in incident response, security architecture reviews, and audit/compliance evidence requests as needed.
- Proactively pursue adjacent skills and stretch responsibilities (cloud security, IAM, security architecture, automation) as the program and this role mature — we are looking for someone who will outgrow the initial job description.
Must support US Eastern Timezone hours
Skills Required
- Must support US Eastern Timezone hours
What We Do
BetaNXT is a leading provider of frictionless wealth management infrastructure, real-time data solutions, and an enhanced advisor experience. We invest in platforms, products, and partnerships to accelerate growth for the ecosystem we serve. Our connective approach empowers our clients to deliver a comprehensive, end-to-end advisor and investor experience. BetaNXT is a premier provider of technology, data, and operations as services to a rich client base of wealth managers, institutional wealth firms, and digital brokers. It is comprised of two industry-leading businesses which, combined, provide end-to-end solutions across the investment lifecycle.
