Lead Security Engineer

Financial Industry Regulatory Authority, Inc. seeks a Lead Security Engineer in Rockville, MD.

Hours:                                     Monday – Friday, 8:00 am to 5:00 pm

Summary of Duties:   

• Direct staff in the execution of manual activities and/or automated activities to ensure applications and projects within their portfolio meet defined quality standards.
• Ensure that security risks are comprehensively and effectively managed through leading the application of established and ad-hoc processes and techniques to identify, validate and prioritize.
• Lead the identification of security requirement deficiencies, eliciting of security requirements, and the architecture and design of security controls.
• Develop and implement strategies to promote consistent use of security controls across the enterprise.
• Lead the operation and monitoring of security controls.
• Establish, implement, and promote security control operation and monitoring strategies.
• Ensure that controls are operating effectively; resolve operating discrepancies.
• Review, triage, and prioritize control output.
• Lead the identification, evaluation, and recommendation of new security technologies, techniques, and tools.
• Lead team in defining, reviewing, and promoting information security policies, standards, guidelines, and procedures.
• Lead and champion efforts to enforce and monitor compliance with internal and external regulations, policies, and standards.
• Establish and promote strategies to ensure that compliance is effectively monitored and enforced.
• Direct internal process improvement initiatives.
• Mentor junior staff.
• Participate in external process improvement committees as a Quality Assurance representative.
• Provide backup coverage for next level management.
• Assist with adherence to technology policies and comply with all security controls.
• Will supervise 1 employee.

Education requirements:          Bachelor’s degree in Computer Science, Engineering, Information Systems or related field or foreign equivalent.

Experience requirements:         7 years’ experience in financial services industry.

Or, alternatively:

Education requirements:          Master’s degree in Computer Science, Engineering, Information Systems or related field or foreign equivalent.

Experience requirements:         5 years’ experience in financial services industry.

Special Skills or Other Requirements:

Experience must include:

• Securing networks and systems architecture.
• Design and implementation of application security controls, cloud security controls, and access management controls.
• Secure software assurance.
• Intrusion detection.
• Defense and incident response.
• Security configuration management.
• Access controls design and implementation.
• Security policy and standards development.
• HTTP/HTTPS, FTP/SFTP, SSH, TCP/IP, and DHCP.

* Hybrid work: Must work at worksite location 2 days per week, except during designated holiday flexible weeks and up to 4 additional flexible weeks per year.

Salary:                                     $192,500 - $232,500 per year

Benefits:  PTO; Paid leave (military, jury duty, bereavement, voting, care of a family member, & childbirth); Paid holidays; OT; Bonus; Health, dental, & vision; Basic life, AD&D, suppl. life, spouse/DP & dependent life, spouse/DP & dependent AD&D, STD, LTD, LTC, BTA, disability, & legal; 401(k) w/ match & add’l FINRA-funded retirement contrib.; Tuition reimb., commuter benefits, & other wellness benefits (adoption asst., backup family care, surrogacy benefits, employee asst., & wellness programs).

Work Conditions

#LI-DNI

To be considered for this position, please submit an application. Applications are accepted on an ongoing basis.

The information provided above has been designed to ind