> Markdown version of [/jobs/ext/2996372-security-engineer](https://www.wearedevelopers.com/jobs/ext/2996372-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Security Engineer - **Company:** Citizens Financial Group - **Location:** Irving, TX, United States - **Experience:** Expert - **Salary:** $140,000.0 - $180,000.0 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Active Directory, Artificial Intelligence, Antivirus Softwares, Software System Penetration Testing, User Authentication, Cloud Computing, Cyber Security, Information Systems, Computer Networks, Data Security, Linux, Monitoring of Systems, Identity and Access Management, Internet Security, Python (Programming Language), Open Web Application Security, Windows PowerShell, Security Software, Software Engineering, Software Vulnerability Management, Data Logging, Scripting, Generative AI, Firewalls (Computer Science), Information Technology, Data Management, Software Coding, Network Server, Vulnerability Analysis, Programming Languages - **Published:** September 19, 2026 - **Apply:** https://www.careerbuilder.com/job-details/principal-security-engineer-johnston-ri--42cfb7e9-6a9c-42a3-8c3c-2f6d0b5326b3 ## About the Role * 10 or more year of Security experience in all domains with a large range of knowledge * Understanding conceptually programming languages, OWASP and Security best practices in application code development * Understanding of Generative AI and Agentic principles * Understanding of application code scanning tools for security vulnerabilities * Understanding and practical knowledge related to pen testing * Understanding of Information Technology general practices * Ability to write technical documentation and analyze security issues * Proven verbal and written communication skills with the ability to present technical concepts to non-technical audiences * Ability to understand conceptually writing scripts, trouble shoot technical security issues within Linux and windows systems. * Working knowledge of identity and access management best practices, current tooling for IAM tasks, active directory, Identity store tools, authentication, and authorization best practice for both internal employee and external party access patterns. * Working knowledge of DLP and data protection best practices and tools * Working knowledge of common operating systems and networking concepts * Working knowledge of security event logging and monitoring systems and processes * Working knowledge of common server systems and concepts * Working knowledge of common scripting languages (Python, PowerShell) * Working knowledge of Anti-Virus Implementation and monitoring * Working knowledge of Firewall security posture and management a plus * Working knowledge of security principles for cloud platforms * Working knowledge of vulnerability management program; detection, reporting, communication, and remediation * Working knowledge of cyber threat modeling, compromise assessments * Working knowledge of Federally regulated banking best cyber and physical security practices * Experience with taking small amounts of cyber information and develop strategic plans working with the business and technology * Ability to work independently with little guidance * Ability to thrive in a fast past and ever-changing environment. * Working knowledge of common architect and patterns across networking, cyber, technology * Ability to take information both verbally and written, and present it in a concise and clear manner, that articulates the problem and the solution to a business user. * Experience with risk based decision making and risk articulation and documentation Education and Certifications: * BA/BS degree in IT security, computer science or related field required, Alliance/Partner Management, Analysis Skills, Antivirus, Artificial Intelligence (AI), Authentication, Banking Services, Best Practices, Cloud Computing, Communication Skills, Computer Science, Computer Security, Computer Servers, Consulting, Cyber-Physical, Documentation, Due Diligence, Equal Employment Opportunity (EEO), Firewalls, Genetics, Identify Issues, Identity Data Management, Information Technology & Information Systems, Information/Data Security (InfoSec), Internet Security, Leadership, Legal, Linux Operating System, Machine Tool, Medical Conditions, Mergers and Acquisitions, Metrics, Microsoft Active Directory, Microsoft Windows Operating System, Military, Operating Systems, People Management, Physical Security, Presentation/Verbal Skills, Problem Solving Skills, Programming Languages, Python Programming/Scripting Language, Risk, Risk Management, Scripting (Scripting Languages), Security Analysis, Security Attacks, Security Software, Software Development, State Laws and Regulations, Strategic Planning, Technical Presentation, Technical Writing, Threat Modeling, Vulnerability Scanners, Windows PowerShell, Writing Skills ## Description The Principal Security Engineer role will support the cyber team that handles the mergers and acquisitions within in Citizens bank, working closely with technology and the business on requirements, strategy and tactical implementations and integration into Citizens. In this role you will work closely with executives from all areas of the company as well as security and technology experts across the enterprise to analyze the potential acquisitions security, develop strategic and tactical solutions, troubleshoot, provide hands on support as well as understand requirements and take actions or provide guidance on remediations across all domains of security. Primary Responsibilities include: * Building strong relationships with stakeholders across security and technology * Develop and maintain strong partnerships with business leadership * Analyzing a large set of cyber and technology and business information to develop strategic plans * Critical thinking skills across both the business, technology, legal and cyber space * Ability to quickly pivot direction and solutioning options within tech and cyber * Communicate and present to the business, technology and cyber * Think outside the box to generate new and innovative solutions while taking a risk based approach to all areas of cyber * Ability to organize and methodically drive ideas in an everchanging environment * Develop Risk Based Mitigations and Solutions * Supporting various security integration efforts across the business lines * Supporting deployment of security tools and software * Assisting in developing meaningful indicator metrics * Providing internal awareness and consulting to colleagues within the business, technology and cyber regarding security initiatives and threats * Providing support for new acquisitions by way of due diligence, discovery, vulnerability remediation, integration strategy and tactical implementation. ## Related Videos - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Checkmate: 5 Real Incidents That Can End a Software Company](https://www.wearedevelopers.com/videos/100126-checkmate-5-real-incidents-that-can-end-a-software-company) ## Related Articles - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Understanding and Mitigating Common Web Vulnerabilities](https://www.wearedevelopers.com/magazine/565-understanding-and-mitigating-common-web-vulnerabilities) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [7 Important Tips That Every Software Developer Should Know](https://www.wearedevelopers.com/magazine/101-7-important-tips-that-every-software-developer-should-know) - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)