Senior Security Engineer

Capital Markets Gateway LLC (CMG) is a financial technology firm, uniquely focused on the equity capital markets (ECM), connecting investors and underwriters via a neutral platform.

CMG delivers integrated ECM data and analytics, unrivaled transparency into deal flow, and workflow efficiencies for an otherwise fragmented and inefficient process.

Providing a digital system of record for firm‑wide deal activity, CMG helps clients make more timely, better‑informed decisions.

Launched in 2017 by a team of ECM practitioners, CMG has completed two successful fundraising rounds and is backed by a group of the world’s most prestigious financial institutions.

The CMG platform is currently relied upon by nearly 150 buy‑side firms representing $40 trillion in AUM and 22 global investment banks.

For more information, please visit www. cmgx. io.

The Role We are hiring a Senior Security Engineer to lead our security risk management and governance work.

This senior individual‑contributor role is for someone who thrives on owning large, ambiguous initiatives end‑to‑end and turning them into shipped, operationalized programs.

You will report directly to the CISO, own cross‑program initiatives, and collaborate closely with senior leadership across the firm.

The core of the role is hands‑on security risk management, threat modeling, security risk assessments, and security design and architecture reviews, paired with the governance and process work that scales the program.

You will partner on customer due‑diligence and SOC 2 evidence and turn security controls into repeatable workflows that fit how the business already works.

You will apply that lens across the full control landscape: cloud security, supply‑chain and vulnerability management, endpoint and identity, detection and response, and AI security.

CMG operates in a highly regulated, client‑facing market, so scope and impact here are unusually large for the level.

We value strong collaboration and a deep sense of ownership: you will be trusted to take initiatives and run with them, often without an established process or a big team behind you.

The defining shift for the program is moving from reactive to proactive, and this role is central to it.

This is a high‑growth‑potential role: we expect the right person to start as a senior individual‑contributor and grow into broader leadership, including people’s leadership, as the function scales.

Responsibilities Security Risk Management Lead threat modeling across products, infrastructure, and new initiatives, identifying and prioritizing risks, attack surfaces, and vulnerabilities.

Conduct security risk assessments and translate findings into pragmatic, risk‑based remediation prioritized by impact and blast radius.

Run security design and architecture reviews, partnering with Engineering and Dev Ops to reduce risk through secure design and simplicity, not just added controls.

Governance, Risk