Security Engineer

Exact compensation may vary based on skills, experience and/or education, and location. This position is also eligible for an annual bonus.

The Security Engineer will be responsible for designing, implementing, and maintaining cybersecurity solutions that protect the Bank's networks, systems, applications, and data from external and internal threats. The Security Engineer responds to security alerts and notifications to address and mitigate potential threats.

• Monitors, analyzes, and responds to alerts generated by security solutions and/or Security Service providers.
• Manages, monitors, maintains, and evaluates the security technology stack, such as endpoint security, web application firewalls, intrusion detection/prevention, data loss prevention, privileged identity access management, and other security solutions.
• Performs oversight of system and data access management solutions.
• Identifies, analyzes, documents, remediates, and mitigates vulnerabilities and threats of managed solutions to support the Bank's Vulnerability Management Program.
• Effectively communicates with Bank associates, vendors, and management.
• Collaborate with IT teams and Information Security peers to implement security best practices and ensure compliance with security policies and procedures.
• Provide, present, and promote the Citizens Experience to all external and internal customers.
• Generates, maintains, and provides compliance evidence for audits, internal requests, and other appropriate business needs.
• Develops, maintains, and documents procedures of managed solutions that protect Bank assets.
• Other duties as assigned.

This job has no supervisory responsibilities.

To perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

Two to four years security operations experience and/or training. Bachelor's degree (B.A.) from four-year college or university preferred.

Ability to read, analyze, and interpret general business periodicals, professional journals, technical procedures, or governmental regulations. Ability to write reports, business correspondence, and procedure manuals. Ability to effectively present information and respond to questions from groups of managers and associates.

Ability to work with mathematical concepts such as probability and statistical inference. Ability to apply concepts such as fractions, percentages, ratios, and proportions to practical situations and interpret and draw bar graphs.

Ability to define problems, collect data, establish facts, and draw valid conclusions. Ability to interpret an extensive variety of technical instructions in mathematical or diagram form and deal with several abstract and concrete variables.

Experience with enterprise security solutions, including but not limited to endpoint security, cloud security, data loss prevention, firewalls, intrusion detection and prevention, identity and access management, data governance, workstation and server operating systems, SIEM, and vulnerability management.

• CompTIA Security+
• GIAC Security Essentials (GSEC)
• Certified Cloud Security Professional (CCSP)
• Certified Information Security Specialist Professional (CISSP)

• Ability to multi-task in a fast paced environment
• Capable of hosting and participating in virtual and on premise meetings, whiteboard sessions, and brainstorming discussions.
• Ability to effectively and professionally communicate and partner with peers, business units, software vendors, technical resources, and management teams.
• Utilize analytical, technical, and social skills to understand, explain, and communicate business requirements in order to provide applicable solutions.
• Strong organizational skills and the ability manage…