Major duties and responsibilities
Lead a team of five (5) Information Security Engineers.
Independently identify and propose remediations for risks related to Bank IT infrastructure.
Support information security projects and lead engineers, vendors, and consultants.
Review, analyze, and update network security tool configuration and architecture, and document, troubleshoot, and remediate issues.
In collaboration with the CISO, identify opportunities to mature information security engineering capabilities and processes, executing some and assigning tasks to others for execution.
Interfaces directly with senior members of IT Operations team to address cross-cutting issues and events.
Acts as backup Incident Response lead for Information Security team.
Work with managed service providers, network administrators, and Security Operations to resolve problems, evaluate new solutions, recommend changes, and investigate incidents.
Analyze reports, identify, and distribute action items or service tickets to support teams or vendors to address InfoSec engineering issues.
Document and submit Change Management requests on behalf of the InfoSec engineering team and present changes to Change Advisory Board when appropriate.
Sets weekly tasks and runs regular security engineering team meetings and one on one is with direct reports. Responsible for performance, setting annual goals including employee development and training.
Manage and distribute the triage and analysis of security events escalated from the Tier-2 support teams.
Act as Backup to the CISO.
Qualifications
Requirements
Bachelor’s Degree in Arts/Sciences (BA/BS) in Computer Science or Information Systems, Information Technology or related focused technical training or in lieu 4 additional years of engineering and project management experience
10 years experience in a combination of information security operations/engineering/administration with emphasis on deploying security tools and capabilities
8 years experience configuring and implementing information security technologies
8 years experience working in Microsoft network security environment with knowledge of Active Directory, Intune, Azure AD and Azure Sentinel, O365 / Security Center
4 years experience leading a team of technical professionals
One or more of the following certifications (or equivalent): − CASP (CompTIA Advanced Security Practitioner) or ISC2 CISSP − EC-Council Certified Ethical Hacker (CEH) − AZ-500 Microsoft Azure Security Engineer Associate
Expert knowledge of security tools used for vulnerability management (Tenable Nessus, Qualys, Nexpose), privileged access management (CyberArk), Security Event Incident Management (Microsoft Sentinel), Microsoft Endpoint Security (EDR)
Expert knowledge of scripting languag(es) such as PowerShell, KQL
Expert knowledge of Microsoft Defender for Cloud
Expert knowledge of Active Directory (AD)
Expert knowledge of TCP/IP networking: networking topology, protocols and services
Expert knowledge of Palo Alto firewalls, Panorama and firewall operations
Experience with operations and optimization of Secure Web Gateway (preferably Netskope)
Experience with Email Security tooling (Proofpoint, Purview) and optimization
Experience leading tool, application, and system security assessments / evaluations
Experience with security elements of Intune, Conditional Access Policy implementations
Experience with security engineering of Linux servers
Strong Active Directory and Windows Group Policy (GPO) knowledge
Experience leading security collaboration with operations teams responsible for networking technology and protocols, including routers, switches, VPNs, email gateways
Preferences
4 years experience with AD tools for inventory, analysis and report on Active Directory structure, objects, permissions, etc
4 years experience with malware analysis using sandboxes
4 years security engineering/administration in the financial sector
One or more of the following certifications (or equivalent): − CCNA − EC-Council Certified Security Analyst (ECSA) − SC-100 Microsoft Cybersecurity Architect − ISC2 System Security Certified Practitioner (SSCP) − ISACA certifications (CRISC) − GSE GIAC Security Expert − GIAC Certifications such as GPPA, GCHI, GPEN − GSAE (GIAC Security Audit Essentials) − GWAPT (GIAC Certified Web Application Penetration Tester)
Experience with network auditing tools such as StealthBits, Varonis
Experience leading engineering support for escalations, investigations, and incident response
Don't meet all the requirements? We encourage you to still apply if you think you are the right person to join our community. We are always interested connecting with people inspired by our mission and values. If you aren't hired for this position, your resume will remain available for the next year and might be considered for future openings. Note: You can update your resume as often as needed.
