Expert Cybersecurity Engineer ( DevSecOps )

Discover. A brighter future.

With us, you’ll do meaningful work from Day 1. Our collaborative culture is built on three core behaviors: We Play to Win, We Get Better Every Day & We Succeed Together. And we mean it — we want you to grow and make a difference at one of the world's leading digital banking and payments companies. We value what makes you unique so that you have an opportunity to shine.

Come build your future, while being the reason millions of people find a brighter financial future with Discover.

Job Description:

At Discover, be part of a culture where diversity, teamwork and collaboration reign. Join a company that is just as employee-focused as it is on its customers and is consistently awarded for both. We’re all about people, and our employees are why Discover is a great place to work. Be the reason we help millions of consumers build a brighter financial future and achieve yours along the way with a rewarding career. 

Responsible for creating the engineering strategy to protect the Corporate Brand. Designs the Cybersecurity road map to contain potential breaches and deliver highly-complex secure systems, cyber applications, technical projects and regulatory and risk requirements. Researches and introduces most robust cyber solutions and build resilient next-generation systems to solve business challenges and enhance the control environment. Drives Cybersecurity framework, road map, program optimization, process engineering, risk remediation, and mitigation of operational risk in a high velocity culture by introducing technology, requirements, deliverables, gaps and systems design. Support and supplement Sr Manager non-personnel functions. Analyzes competitive strategies, cyber technologies, metrics models, and performance indicators. Propose and oversee innovative strategic solutions and technologies to support executive decision-making.  Actively manages and escalates risk and customer-impacting issues within the day-to-day role to management. 

Responsibilities 

• Acts as the principal advisor to upper management in Cybersecurity matters 

• Establish the direction for major engineering initiatives. Provides requirements to Cybersecurity architects and engineers in the design and development of security solutions consistent with business goals and risk tolerance 

• Works closely with architects, engineers, and key stakeholders to ensure security requirements are effectively met through all phases of system lifecycles 

• Determines whether systems perform as expected, provides input to the determination of operational effectiveness, and takes action to remediate issues and resolve gaps 

• Directs security solutions and technical assurance in alignment with business risk and regulatory requirements 

• Works closely with management to define, promote, and present the strategic direction of the department 

• Provides strong leadership and direction to team members. Provides subject matter expertise across all Cybersecurity technologies, and across Infra, Data, and Operations departments 

• Identifies, evaluates and remediates potential vulnerabilities, and develop cyber solutions, internal processes and standards for threat intelligence workflow 

Minimum Qualifications 

At a minimum, here’s what we need from you: 

• Bachelors – Computer Science, Engineering, Informatics, Information Security, Information Technology

• 8+ Years – Information Security, Application Security, Security Engineering or related 

Internal applicants only: technical proficiency rating of expert on the Dreyfus engineering scale 

Preferred Qualifications 

Bonus Points If You Have: 

• Extensive knowledge and experience in DevSecOps c

• Extensive knowledge of container and cloud based computing

• Expert Experience in vulnerability management and risk assessment

• Experience reporting risk

• Familiar with Threat Modeling concepts

• Familiar with regulatory demands and compliance protocols such as PCI and FDIC

• Experience implementing and utilizing the output of Application Security tools such as SAST, IAST, DAST, SCA

External applicants will be required to perform a technical interview. 

What are you waiting for? Apply today! 

And by the way, while you're waiting to hear from us, don't forget to check out the great benefits Discover offers. 

All Discover employees place our customers at the very center of our work.  To deliver on our promises to our customers, each of us contribute every day to a culture that values compliance and risk management.   

The same way we treat our emplo