Information Technology Security Engineer

Job Summary: The IT security engineer is responsible for ensuring security in the IT space by reducing the attack surface, protecting system boundaries, keeping computer systems and network devices hardened against attacks and securing highly sensitive data. Qualified candidates will have a background in security or systems engineering. Promotes an environment of teamwork within the department and across the bank. Represents INTRUST Bank in all he or she does in the community and is focused on the development of new business relationships. Must maintain strict standards of confidentiality and perform duties in a manner supporting INTRUST’s character qualities., Essential Functions: All expectations described in the job description’s essential functions are necessary to be successful in this role, performed with or without a reasonable accommodation.

• Apply critical thinking techniques to detect and resolve cybersecurity issues.

• Engineer, implement, and monitor security measures for the protection of INTRUST Bank computer systems, networks and information.

• Develop innovative solutions for identifying and remediating vulnerabilities and threats.

• Use security controls and best practice for incident prevention, detection, and response.

• Responsible for vulnerability scanning, security patching, reporting, and identity/access management.

• Identify and define system security requirements.

• Prepare and document standard operating procedures and protocols.

• Configure and troubleshoot security infrastructure devices and applications.

• Develop technical solutions and evaluate new security tools to help mitigate security vulnerabilities and automate repeatable tasks.

• Ensure that INTRUST Bank knows as much as possible, as quickly as possible about security incidents, escalating appropriately.

• Write comprehensive reports including assessment-based findings, outcomes and propositions for further system security enhancement.

• Participates in regular rotation of on-call assignments.

• Maintains strict standards of confidentiality., This job description summary is not intended to be an employment contract, nor is it intended to state or imply these are the only activities to be performed by the employee occupying this position. Employees will be required to follow any other duties as assigned or requested by their supervisor.

Education and Experience: Bachelor’s degree in Computer Science (or related field) and 3+ years’ work experience in IT Security with a preference for a medium to large enterprise network, or 7+ years’ IT Security work experience with a preference for a medium to large enterprise network. Experience in Security or System Engineering strongly preferred. Specialized experience with Microsoft (MS) Windows domains. Experience with MS Windows desktop and server domain and security practices. Vulnerability scanning and security patching experience. Hands-on experience with security tools, firewalls, network devices, intrusion detection systems, anti-virus software, authentication, or log management.

Required Skills and Knowledge: Knowledge of cybersecurity and system hardening practices with experience building and maintaining security systems. Technical knowledge of network devices, operating systems, and antivirus systems. Working knowledge of databases. Understanding of vulnerability scanning and ability to remediate findings quickly, systematically, and with documentation.

Required Licenses and/or Certifications: None.

Physical Demands: Extended period(s) of time may be spent viewing a personal computer, sitting, standing, and walking. Occasional lifting up to 25 lbs., some bending and kneeling. The physical demands necessary for this role should be performed with or without a reasonable accommodation.