Security Engineer 2 - Cyber Security

Role Overview

Security Engineer 2 (Cyber Security) responsible for designing, planning, and implementing in-house and cloud-based information systems and enterprise software architectures that support the bank’s security operations. The engineer serves as a technical resource for security engineering initiatives, enhancing the organization’s security posture.

Responsibilities

• Design and implement new security designs and solutions; provide expert guidance to IT security leadership.
• Architect, engineer, and deploy advanced security solutions across the enterprise; report outcomes to security leadership.
• Act as an escalation point for security alerts, events, and logs; escalate findings to senior management.
• Design, implement, and optimize technical controls to mitigate vulnerabilities.
• Recommend and test system hardening standards for network-attached platforms and applications; ensure compliance via structured assessments and detailed reporting.
• Manage the lifecycle of security platforms and infrastructure (configuration, troubleshooting, optimization, and update deployment).
• Develop, enhance, and enforce enterprise security policies, standards, and procedures aligned with best practices and regulatory requirements.
• Produce advanced technical and executive-level reports on assessment outcomes, risk findings, security posture, and remediation strategies.
• Tune and optimize configurations and policies for critical security platforms, including:
  • Firewalls
  • IPS/IDS
  • Host-based firewalls
  • Application control technologies
  • SIEM platforms
• Deliver ongoing reporting and analysis on enterprise security posture, threat trends, and control effectiveness.
• Perform advanced monitoring, analysis, and tracking of application and system vulnerabilities:
  • validate severity
  • prioritize risk
  • guide remediation planning with Threat Intelligence and IT teams
• Track, analyze, and report patch and configuration compliance; identify gaps and work with Threat Intelligence and system owners to drive remediation and continuous improvement.

Requirements / Other

• Ability to acquire and maintain proficiency in bank policies and procedures and comply with applicable laws, rules, and regulations.
• Complete all assigned compliance training on time.
• Ability to read and interpret business/technical publications and governmental regulations.
• Ability to write reports and professional/business correspondence.