Information Security - Lead Information Security Engineer

• Lead the day-to-day execution of SecCM activities and team operations
• Conduct technical reviews of a wide range of technology products and identify opportunities to apply industry standard security configurations (CIS Benchmarks, STIGs etc.) to improve the banks security posture
• Utilize SecCM subject matter expertise and industry-standard best practices to implement robust and effective security configuration management processes
• Provide security consulting on large projects for internal clients to ensure conformity with corporate information, security policy, and standards
• Design, document, test, maintain, and provide issue resolution recommendations for highly complex security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security
• Identify security vulnerabilities and issues, perform risk assessments, and evaluate remediation alternatives
• Collaborate and influence all levels of professionals including risk partners, and senior managers

• 5+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education
• 3+ years of security configuration management or systems administration experience
• Experience with SecCM industry standards (e.g. CIS Benchmarks, STIGs)
• Experience with Security Configuration Management tools (e.g., Ansible, Puppet, Chef etc.)
• Advanced information technology, computer science, and information security skills with a focus on infrastructure, on-premises and cloud environments, software and hardware
• Strong teamwork and collaboration skills
• Subject matter and best practices expertise on relevant and emerging technologies and trends, including cloud, containers, OS, VMs, storage, and networking
• Reasoning, analytical, and troubleshooting skills
• Excellent written and verbal communication skills with the ability to reach a target audience

Desired Qualifications:

• Team coaching and leadership skills
• Security certifications - CISSP, CSSP
• Technology certifications - RHCSA, RHCE, CompTIA Server+
• Project or product management skills
• Experience with Agile methodologies (Scrum or Kanban)