About CLS

CLS is the trusted party at the centre of the global FX ecosystem. Utilized by thousands of counterparties, CLS makes FX safer, smoother and more cost effective. Trillions of dollars’ worth of currency flows through our systems each day.

Created by the market for the market, our unrivalled global settlement infrastructure reduces systemic risk and provides standardization for participants in many of the world’s most actively traded currencies. We deliver huge efficiencies and savings for our clients: in fact, our approach to multilateral netting shrinks funding requirements by over 96% on average, so clients can put their capital and resources to better use.

CLS products are designed to enable clients to manage risk most effectively across the full FX lifecycle – whether through more efficient processing tools or market intelligence derived from the largest single source of FX executed data available to the market.

Our ambition to make a positive difference starts with our people. Our values underpin everything that we do at CLS and define our working environment:

Pivotal purpose
Trusted guardian
Targeted innovation
Facilitate connections
Delivering excellence
Inclusive culture

Job Information:

Functional Title: Cyber Hygiene and Metrics Engineer
Department: CISO
Corporate Level: Vice President
Reports To: Cyber Hygiene and Metrics Engineering Lead
Location: Iselin, New Jersey, onsite 2 days per week
Expected full-time salary range between $175,000 - $190,000 + variable compensation + 401(k) match + benefits.

What you will be doing:

We are seeking a highly skilled Security Data Analytics & Metrics Engineer to architect, engineer, and operate a strategic security analytics platform on AWS from the ground up. The successful candidate will design and build a modular security data architecture that ingests telemetry from security, cloud, infrastructure, identity, and risk management platforms to deliver executive-level metrics, operational insights, regulatory reporting, and continuous control assurance. The platform follows a modern federated architecture built around a Security Data Lake, analytics services, exposure management, and executive reporting capabilities rather than reliance on a traditional monolithic SIEM model.

The role combines data engineering, cloud architecture, analytics engineering, and security domain expertise to create a trusted source of security performance data for technology leadership, regulators, auditors, and the Board.

Key Responsibilities:

Architecture & Engineering

Design and implement a cloud-based security analytics platform on AWS.
Architect data pipelines that ingest, normalize, enrich, and correlate telemetry from multiple security and technology platforms.
Build and operate a Security Data Lake leveraging AWS-native services and open data standards.
Define scalable data models supporting operational metrics, risk analytics, compliance reporting, and executive dashboards.
Implement data governance controls, metadata management, lineage tracking, and quality assurance frameworks.

Data Platform Development

Develop real-time and batch data pipelines using AWS services including S3, Glue, Lambda, Athena, EMR, Redshift, Kinesis, and EventBridge.
Engineer integrations with:
SIEM platforms
IAM systems
Cloud Security Posture Management (CSPM)
Endpoint Protection Platforms (EPP)
Threat Intelligence platforms
Exposure Management solutions
Implement common data schemas and normalization standards, including OCSF where appropriate.
Build reusable APIs and data products enabling self-service analytics.

Metrics Engineering & Analytics

Define and maintain enterprise security KPIs, KRIs, PLAs, and performance metrics.
Build metric calculation frameworks covering:
Incident management
Mean Time to Respond (MTTR)
Mean Time to Neutralize (MTTN)
Security control effectiveness
Vulnerability remediation
Identity governance
Cloud security posture
Regulatory compliance
Create automated executive scorecards and Board-level reporting views.
Develop analytical models to identify trends, risks, control gaps, and performance opportunities.