Information Security Engineer II (Remote)

Position Description:

The Information Security Engineer (ISE) will ensure enterprise system and infrastructure is aligned with information security strategy.  The ISE is expected to collaborate with peers in the IT department and with business unit leaders to share the enterprise security vision and to solicit their involvement in achieving higher levels of enterprise security through information sharing, design collaboration, and cooperation. The ISE will accept ownership of and accountability for designing and implementing security capabilities, handling incident escalations, developing advanced detection and mitigation capabilities.  This position reports to the SVP of Information Security.

Position Accountabilities:

• Work with the SVP to develop a security program and security capabilities that address identified risks and business security requirements.
• Design and implement security monitoring capabilities and analysis use cases.
• Facilitate incident and threat mitigations across multiple teams.
• Report unresolved network security exposures, misuse of resources or noncompliance situations using defined escalation processes.
• Assist and train team members in the use of security tools and tradecraft.
• Maximize investments by identifying and leveraging optional tool features
• Work closely with IT and business stakeholders to research, recommend, evaluate and implement information security solutions that identify and/or protect against potential threats, and respond to security violations.
• Perform system security administration on designated technology platforms, including operating systems, applications and network security devices, in accordance with the defined policies, standards and procedures of the organization, as well as with industry best practices and vendor guidelines.
• Perform installation and configuration management of security systems and applications, including policy assessment and compliance tools, network security appliances and host-based security systems.
• Provide subject matter expertise for advanced attack scenarios, infrastructure resiliency, and layered defenses
• Provide expertise for incident response and remediation
• Ensure teammates are leveraging system logs and network traffic to identify unusual or suspicious activity. Make recommendations to advance the team’s knowledge and tradecraft.
• Investigate and resolve security violations by providing postmortem analysis to illuminate the issues and possible solutions.
• Assist in the governance and monitoring of firewalls, intrusion detection systems, switches and routers.
• Download and test new security software and/or technologies.
• Identification and development of custom alert and detection rules
• Review, assess, and mitigate penetration tests and vulnerability assessments on information systems and infrastructure.
• Recommend the scheduling and/or application of fixes, security patches and any other measures required in the event of a security breach.
• Monitor security vulnerability information from vendors and third parties.
• Participate in information security working groups

Organizational Relationship:

This position reports to the SVP, Information Security.

Position Qualifications:

Education & Experience:

• Minimum of five years of cyber security experience;
• Bachelor's degree in information systems, or equivalent work experience.

Knowledge & Skills:

• Expert knowledge of information security principles, including risk assessment and management, threat and vulnerability management, incident response, and identity and access management.
• Expert knowledge of networking and operating systems
• Expert knowledge of network infrastructure, including routers, switches, firewalls, and associated network protocols and concepts.
• Expert in network perimeter technologies
• Expert knowledge in log management, aggregation, parsing, correlation, enrichment, and analysis
• Ability to work well under minimal supervision.
• Strong team-oriented interpersonal skills, with the ability to interface effectively with a broad range of people and roles, including vendors and IT-business personnel.
• Ability to influence IT peers to embed security into the infrastructure and thought process
• Ability to train and mentor teammates
• Expert in developing automated workflows
• Experience in banking technology / financial or defense services desirable
• Information Security certifications preferred
• Proficient in netflow analysis
• Must be able to discover, research, and apply new technologies
• Experienc