Security Engineer

About the Team

Our security engineering team at the bank is dedicated to designing, building, and operating secure systems at scale. As our engineering teams innovate rapidly, our role is to provide robust security tools and processes that enable swift development while maintaining security standards. We emphasize automation, utilize security metrics to drive continuous improvements, and follow a proactive approach for enhancing security controls and culture.

Role Overview

• Drive security strategies and initiatives from inception across areas such as identity management, application security, cloud security, DevSecOps, and detection engineering.
• Demonstrate strong stakeholder engagement skills to influence across various business domains.
• Develop and implement security tools aimed at identifying and eliminating vulnerabilities throughout all phases of the software development lifecycle.
• Work extensively with public cloud environments, Terraform, commercial cloud security posture management platforms, and open-source automation tools.
• Engage with Vulnerability Posture Management tools including Rapid7, Nessus, Trivy, Crowdstrike Falcon, and OpenVAS.

Day-to-Day Responsibilities

• Collaborate with the security engineering team to translate security requirements into scalable automated solutions that mitigate risks.
• Formulate and oversee the security strategy for designated domains incorporating both tactical and long-term planning.
• Work closely with teams such as SRE, Data Engineering, GenAI, and Product to uncover security posture enhancements and lead execution plans.
• Ensure compliance with regulatory and internal policies through maintaining security standards and operational procedures.
• Coordinate and lead interactions with internal and external audits relevant to technology operations.
• Provide mentorship to junior engineers to boost team expertise and improve standard operating procedures in security.

Required Qualifications and Skills

• Minimum 2-3 years’ experience in information security roles.
• Hands-on experience in scripting or programming for security automation purposes.
• Solid understanding of cloud platforms including AWS, serverless architectures, managed services, and container technology.
• Strong interpersonal skills with the ability to stay calm under pressure in fast-moving environments; creative and innovative thinking.
• Professional certifications like CISSP, CISM, CEH, or equivalents.
• Comprehensive knowledge of security frameworks, standards, and industry best practices.
• Expertise in key security technologies such as SIEM, IDS/IPS, firewalls, and endpoint security solutions.
• Deep understanding of network protocols, various operating systems, and application security principles.
• Excellent analytical, problem-solving, and decision-making abilities.
• Robust leadership, communication, and teamwork skills.
• Capability to manage multiple simultaneous projects and priorities effectively in a dynamic setting.