Principal Security Engineer

Role Summary

We are looking for a seasoned Principal Security Engineer to provide comprehensive technical leadership in cybersecurity engineering within a prominent banking environment. The role demands the establishment of security architecture standards and the oversight of advanced security controls implementation, ensuring critical technology platforms meet enterprise security, regulatory compliance, and risk management criteria.

Key Responsibilities

• Lead technical efforts in cybersecurity engineering and security architecture projects.
• Develop and deploy enterprise-level security architectures for vital banking platforms and applications.
• Manage the implementation of sophisticated security controls across on-premises, cloud, and hybrid infrastructures.
• Create and enforce security design principles, standards, and patterns for technical teams.
• Provide guidance to security engineering teams on best practices and risk remediation.
• Promote secure-by-design methodologies throughout the software delivery lifecycle.
• Implement and enhance controls related to identity and access management, encryption, data protection, threat detection, and security monitoring.
• Conduct architecture reviews, threat modeling, and security risk evaluations.
• Collaborate with various technology and business units to enhance security resilience.
• Support vulnerability management and remediation plans.
• Ensure adherence to enterprise security standards and compliance with regulatory and risk frameworks.
• Participate in security governance, audit, and assurance activities.
• Mentor and develop capabilities of security engineering personnel.
• Assess emerging technologies and propose innovative security solutions.

Qualifications & Expertise

• Minimum of 10 years' experience in Cybersecurity Engineering, Security Architecture, or Information Security disciplines.
• Demonstrated ability to design and implement comprehensive enterprise security architectures.
• Expertise in security architecture, cloud security, identity and access management, network security, data security, and threat detection and response.
• Hands-on experience deploying security controls in cloud and hybrid environments.
• In-depth knowledge of cybersecurity frameworks, standards, and risk management practices.
• Skilled in conducting threat modeling and executing security assessments.
• Proven leadership experience managing security engineering teams.
• Strong communication and stakeholder management skills.
• Experience in financial services or banking sectors is advantageous.

Certifications

• Required: Certified Information Systems Security Professional (CISSP)
• Preferred: Offensive Security Certified Professional (OSCP)

Additional Desired Skills and Experience

• Expertise in designing security measures for digital banking platforms.
• Comprehensive understanding of secure cloud adoption methodologies.
• Knowledge of DevSecOps and contemporary software security practices.
• Experience supporting audits, security evaluations, and regulatory compliance activities.
• Familiarity with enterprise-level security monitoring and detection engineering.
• Background in operating within strictly regulated environments.

About the Employer

With over 28 years of industry presence, the company emphasizes innovation to deliver agile and practical solutions that transform businesses and careers. They prioritize diversity, equity, and inclusion (DEI) in building high-performance teams and actively encourage applications from candidates regardless of race, gender, disability, or other unique characteristics.