Security Engineer

Description Job Title: Security Engineer Location: Remote but must living in AL, AR, FL, GA, LA, MO, MS, TN OR TX. Position Summary: Incumbent will be responsible for the oversight of systems related security operations in the bank network system, to include evaluating system configurations for adherence to security best practices, internal policies, and standards. In addition, incumbent shall be responsible for monitoring systems for alerts, generating reports, and supporting the Cyber-Defense team with event correlation, research, and investigations pertaining to security. Specific Responsibilities and Duties: Work with Information Technology team during system implementation, system changes, and upgrades to ensure security goals are met. Work with vulnerability management process to ensure risks for server systems are evaluated and mitigated as needed. Use security systems to generate timely, actionable reports related to security events as needed. Aid in investigations into security related events and activities. Utilize server security monitoring tools to develop activity baselines and to detect anomalous behavior. Review real time system data/logs in an effort to enhance network baseline information and to detect anomalies. Review/research ongoing trends related to information security and their potential impact on bank systems. Utilizes SIEM tool to correlate reported information with known cybersecurity threats to help ensure ongoing risk mitigation. Utilize SIEM tool to correlate reported information with other bank systems to help proactively identify security trends, risks, and potential threats. Maintain proficiency in endpoint and network related security systems and technologies while working with other network security staff to ensure security controls complement overall security posture and functionality. Support Cyber Defense and other Information Security teams as needed. Support security governance requirements for process effectiveness, and risk management. Education: Bachelor's degree in Information Systems, Computer Science, or related field and 2-3 years' experience in Information Security. Direct experience related to network security and/or endpoint security tools preferred. Holds or is working toward industry standard network and/or security certifications -- Comptia Security+ or ISC2 SSCP preferred, CISSP optional. Knowledge, Skills, Abilities: Understanding of network communications for LAN/WAN environments, network architecture, information security, and IT/IS best practices. Professional communication, team building and leadership, problem solving, creative thinking, and familiarity with various technology skills/platforms. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities The contractor will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. However, employees who have access to the compensation information of other employees or applicants as a part of their essential job functions cannot disclose the pay of other employees or applicants to individuals who do not otherwise have access to compensation information, unless the disclosure is (a) in response to a formal complaint or charge, (b) in furtherance of an investigation, proceeding, hearing, or action, including an investigation conducted by the employer, or (c) consistent with the contractor's legal duty to furnish information. 41 CFR 60-1.35(c)

Created: 2024-11-05