SUMMARY : Information Security Engineers are responsible for establishing and maintaining a corporate-wide information security technology program to ensure that information assets are adequately protected. This includes having an up-to-date understanding of the latest security threats, trends, and technologies, managing and supporting existing security solutions, evaluating, designing, and implementing new technical security controls, and working to meet security objectives. ESSENTIAL DUTIES AND RESPONSIBILITIES include the following. Other duties and special projects may be assigned. Assist in the design and implementation of the security infrastructure. Configure, upgrade, and troubleshoot various information security technologies such as anti-virus and email security solutions. Perform monitoring for security alerts for various systems and databases, alerting management to security issues, and making recommendations on proposed resolutions. Assist in managing third-party SSL certificates for company websites. Assist in maintaining all technical security controls. Make recommendations on improvements to reduce the frequency and duration of incidents impacting confidentiality, integrity, and availability of the organization's data. Represent Information Security at change control meetings. Participate in disaster recovery activities as needed. Support end-user community with security-related issues. Work outside normal hours when necessary to diagnose and implement product releases or changes, ensuring workflow is not interrupted. Perform on-call duties in a team environment. Perform additional duties as assigned. Analyze data derived from system logs and reports. Assist in selecting, testing, implementing, documenting, operating, and maintaining various information security technologies such as authentication devices, access controls, firewalls, IDS/IPS/SIEM systems, malware detection systems, forensic and vulnerability management tools. Configure, upgrade, and troubleshoot security technologies including firewalls, VPN solutions, anti-virus, SIEM, DLP, vulnerability scanners, web filtering, and email security solutions. Interface with external vendors on hosted security services provided to the organization. Collaborate with IT and business units to identify security requirements for new and existing projects, ensuring the confidentiality, integrity, and availability of organizational assets. Assist in providing reports, presentations, and recommendations on operational aspects of information security to senior management. Assist with internal and external audit requests. Comply with applicable federal and state laws, regulations, and guidance, including those related to anti-money laundering (Bank Secrecy Act, US PATRIOT Act, etc.). Adhere to bank policies and procedures and complete required training. Identify and report suspicious activity. EDUCATION: Bachelor's Degree in Information Systems or equivalent experience required. EXPERIENCE Minimum of 3 years of IT experience working extensively on network and data security infrastructure and analysis. Working experience with security technologies such as firewalls, DLP solutions, vulnerability scanners, anti-virus solutions, SIEMs, email gateways, and content proxies is required. KNOWLEDGE, SKILLS AND ABILITIES Familiarity with bank security policies and government regulations related to information security is preferred. Strong system administration, network, security, and troubleshooting skills. Working knowledge of network infrastructure, including routers, switches, firewalls, and associated protocols. Detail-oriented with strong organizational and prioritization skills. Excellent communication and written skills. Ability to manage multiple projects simultaneously. Proficiency in Microsoft Word, Excel, PowerPoint, and Visio. CERTIFICATES, LICENSES, REGISTRATIONS CISSP certification preferred. SANS GIAC certification preferred. CCNA / NP certification preferred. Security+ or related security certifications preferred.

#J-18808-Ljbffr