Information Security Software Engineer

Company

Federal Reserve Bank of Kansas City

As a part of the nation's central bank, the Federal Reserve Bank of Kansas City supports a stable financial system. We work across diverse communities throughout our region and the nation to promote trust in our economy, the payments system, and financial institutions for all people.

Together, we serve everyone from our neighbors next door to the vast nation. We serve the public in an innovative environment that values the highest ethical standards. Here you'll find the support to develop professionally, united in a clear and common purpose, and grow within a diverse team.

We are seeking cybersecurity professionals to join our Information Security Architecture team as a software engineer.

You will play a key role in developing, implementing, and maintaining security solutions to safeguard our systems and data assets. As an information security software engineer you will protect confidentiality, integrity and availability of information assets. This will be within a team consisting of those who are not only security experts, but also those who are versed in developing software, proactively finding security, compliance, and process gaps, utilizing security data analytics, applying artificial intelligence and machine learning concepts for better security automation capabilities, and securely deploying and administering software within cloud environments. You’ll partner with business areas, vendors, and our diverse network of professionals to identify, implement and support security across the organization.

Candidates with interests in cloud environment deployments, information security, data management, low-code and no-code solutions, DevSecOps and/or artificial intelligence will be ideal for you.

Key Activities:

• Implement hardened and secured infrastructure workloads. This includes deploying infrastructure as code (IAC) and policy as code (PAC) as part of DevSecOps and continually enforcing security on the workload either by immutability (i.e., investigate, tear down and replace unsecured workloads and workloads acting outside defined parameters) or by implementing additional security measures.

• Implement and consults on secure continuous integration and continuous delivery (CI/CD) pipelines, evaluating code and/or applications, or creating code to facilitate the process.

• Identify gaps/opportunities for enhancements to workflows and processes for enhancing the software development lifecycle (SDLC).

• Alleviate Information Security architecture challenges by finding/developing solutions.

• Monitors information security policy compliance using security tooling.

• Evaluate and implement security products and/or processes to enhance productivity and effectiveness for various platforms and initiatives.

• Provide technical expertise and support to internal teams on security-related matters.

• Consult and provide information security expertise to support various projects.

• Collaborate with cross-functional teams to integrate security measures into existing software applications and infrastructure.

• Stay current with emerging technologies, industry trends, and best practices in cybersecurity to enhance our security posture.

• Participate in production response activities and contribute to the development of support handling procedures, and custom development products.

• Support leadership decision making through timely analysis and written communications.

Qualifications:

• Typically requires 0-3 years previous experience.

• Bachelor's Degree in Technology, Engineering, Computer Science, Information Systems, Cybersecurity or other related field or equivalent work experience.

Preferred Qualifications:

• Supreme competence in cloud technologies such as AWS, Azure, and other platforms.

• Combines and organizes information into meaningful patterns; identifies underlying relationships, causes and effects; and combines pieces of information to form conclusions or general rules.

• Rapidly acquires new knowledge and learns new skills, and practices agile methodologies to planning and accomplishing work.

• Conveys complex and technical issues to diverse audiences.

• Demonstrated competencies with artificial intelligence are beneficial.

• Working knowledge of Terraform, Ansible, Cloud Formations, AWS Config, AWS Inspector, Guard Duty and others.

• Strong knowledge of software development languages, tools and techniques such as Python, JSON, YAML, and Java

• Expertise with tool integration for the DevOps pipeline such as Git

• Novice understanding of