Security Engineer 2 - Cyber Security

SUMMARY:

This position is responsible for design, planning, and implementation of

in-house and cloud-based information systems, and enterprise software

architectures that support the bank’s information security operations

functions. This role performs feedback and recommendation in the evaluation and

selection of technologies, ensuring confidentiality, integrity, availability of

data, and alignment with the standards of the bank. The position serves as a

technical resource for security engineering initiatives, applying advanced

knowledge to evaluate, build, and deliver solutions that enhance the security

posture of the organization.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

To perform this job successfully, an individual must be able to perform each

essential duty satisfactorily. The requirements listed below are representative

of the knowledge, skills, and/or ability required. Reasonable accommodations may

be made to enable individuals with disabilities to perform the essential

functions.

Engineers and implements new security designs and solutions and report to

Information Technology security management.

Architects, engineers, and deploys advanced security solutions across the

enterprise, providing expert-level guidance and reporting outcomes to

Information Technology security leadership.

Assists Security Analysts as an escalation point for security alerts, events,

and logs, escalating findings appropriately to senior management.

Designs, implements, and optimizes technical controls to mitigate

vulnerabilities, leveraging both existing and emerging security technologies.

Recommends and tests system hardening standards for new and existing network

attached platforms and applications, ensuring compliance through structured

assessments and detailed reporting.

Oversees lifecycle management for security platforms and infrastructure,

including advanced configuration, troubleshooting, optimization, and update

deployment for security technologies and supporting systems.

Contributes to the development, enhancement, and enforcement of enterprise

security policies, standards, and procedures, ensuring alignment with industry

best practices and regulatory requirements.

Produces advanced technical and executive-level reports detailing assessment

outcomes, risk findings, security posture, and recommended remediation

strategies.

Leads tuning, configuration optimization, and policy enhancements for critical

security platforms—including firewalls, IPS/IDS, host‑based firewalls,

application control technologies, and SIEM platforms—in collaboration with

respective IT teams.

Delivers ongoing reporting and analysis to Information Technology security

leadership regarding enterprise security posture, threat trends, and control

effectiveness.

Performs advanced monitoring, analysis, and tracking of application and system

vulnerabilities; validate severity, prioritize risk, and guide remediation

planning in conjunction with Threat Intelligence and respective IT teams.

Tracks, analyzes, and reports on enterprise patch and configuration compliance,

identifying gaps and working with Threat Intelligence and system owners to drive

remediation and continuous improvement.

OTHER REQUIREMENTS:

Banking is a highly regulated industry and you will be expected to acquire and

maintain a proficiency in the Bank's policies and procedures, and adhere to all

laws, rules and regulations that are applicable to your conduct and the work you

will be performing. You will also be expected to complete all assigned

compliance training in a timely manner.

Ability to read, analyze and interpret general business periodicals,

professional journals, technical procedures or governmental regulations.

Ability to write reports, business correspondence and procedure manuals.

Ability to effectively present information and respond to questions from groups

of managers, clients, customers and the general public.

Ability to work with mathematical concepts such as probability and statistical

inference, fundamentals of plane and solid geometry and trigonometry.

Ability to apply concepts such as fractions, percentages, ratios and proportions

to practical situations.

Ability to solve practical problems and deal with a variety of concrete

variables in situations where only limited standardization exists.

Ability to interpret a variety of instructions furnished in written, oral,

diagram or schedule form.

Advanced level of knowledge and understanding of networking and communication

technologies, including TCP/IP protocol, remote access methods, firewalls and

wireless protocols.

Experience with end-point security best practices leveraging NIST, CIS or

Microsoft standards preferred.

Certifications related to system architecture, design, and administration

(Microsoft, Cisco, Vmware) are preferred.

Certifications related to security operations (EC-Council, CompTIA) are a plus.

Qualifications

• Bachelor’s degree in Information Security or other computer-related field, and
• four years of related experience; or equivalent combination of education and/or
• experience.
• Professional level knowledge of common network protocols utilized on corporate
• networks.
• Professional level knowledge of at least three of the following technologies:
• Networking infrastructure products (routers, switches, wireless), Windows
• Operating Systems, Security infrastructure products (firewalls, intrusion
• prevention systems, content filtering), Virtualized infrastructure (Citrix,
• VMware, Nutanix), Cloud administration and security (Azure, AWS – Amazon Web
• Services) required.
• Experience in an environment with change management processes.
• Experience with cloud administration and security in Azure and/or AWS is
• preferred.