Technology Security Engineer

The Technology Security Engineer supports Information Technology and Information Security leadership in maintaining and strengthening the organization’s cybersecurity posture. This role exists to help protect systems, data, and technology assets through the effective operation of security technologies and controls. Working collaboratively across technical teams, the position contributes to cybersecurity risk management, operational resilience, and the ongoing maturity of the organization’s security program. Responsibilities The intent of this job description is to provide a representation of the types of duties and level of responsibilities required of this position and is not intended to be an exhaustive list of all responsibilities, duties, and skills. Team members may be directed to perform job-related tasks other than those specifically stated in this description.

• Implements, configures, and maintains security technologies, including endpoint protection, vulnerability management platforms, SIEM solutions, identity and access management controls, network security tools, and cloud security controls
• Supports the implementation and ongoing operation of security controls across network and systems infrastructure in alignment with regulatory requirements, industry frameworks, and organizational policies
• Monitors security systems, analyzes logs, alerts, and security findings, investigates potential threats, and escalates security incidents in accordance with established procedures
• Performs system hardening, vulnerability assessments, control validation, and remediation activities to strengthen the organization’s cybersecurity posture and maintain compliance with established security requirements
• Supports security incident response by performing initial analysis, gathering evidence, documenting actions, coordinating with internal teams and vendors (with security configurations within third-party developed hardware and software) and assisting with corrective actions.
• Tracks, manages, and reports on security findings, control deficiencies, remediation activities, and related documentation to support ongoing cybersecurity operations and regulatory compliance
• Assists with internal and external audits, regulatory examinations, cybersecurity assessments, and the preparation of supporting evidence and documentation
• Supports disaster recovery, business continuity, and cyber resilience initiatives through testing, validation, and continuous improvement activities
• Collaborates with technology teams, business stakeholders, vendors, and leadership to troubleshoot security issues, implement corrective actions, and support secure technology operations
• Research emerging threats, vulnerabilities, and security technologies and recommends improvements to strengthen security architecture, controls, and operational effectiveness, Environmental or atmospheric conditions commonly associated with the performance of this job’s functions.
• Flexible remote or hybrid (combination of remote & onsite) work environment; requires regular use of online tools, systems, and collaboration platforms
• General office setting when working onsite
• Occasional travel to branch locations, vendor sites, or other business-related locations
• Attendance at offsite meetings, events, or conferences as needed
• This position requires alert monitoring and incident response as needed, including weekends and holidays

An equivalent combination of education, training, and experience will be considered.

• High school diploma or equivalent
• 1+ years of experience designing, implementing, supporting, or maintaining enterprise technology or cybersecurity solutions and/or relevant transferable experience, * Degree or specialized training in cybersecurity, information technology, computer science, information systems, network engineering, or a related field
• 2+ years of experience in technology or cybersecurity engineering within financial services, banking, or other highly regulated industries
• Certified in CISSP, Security+, or similar certifications

Knowledge, Skills, and Abilities (KSAs) A representation of the knowledge, skills, and abilities necessary to perform this job competently.

• Knowledge of cybersecurity principles, including confidentiality, integrity, availability, defense-in-depth, and least privilege
• Knowledge of information security technologies, network infrastructure, operating systems, cloud environments, and enterprise technology architecture
• Knowledge of applicable cybersecurity frameworks, regulatory requirements, and industry standards relevant to financial services
• Skilled in implementing, configuring, and maintaining enterprise technology and cybersecurity solutions
• Skilled in analyzing logs, alerts, system activity, and security events to identify potential threats and vulnerabilities
• Skilled in troubleshooting technical issues, identifying root causes, and recommending effective solutions
• Skilled in documenting security configurations, findings, procedures, and technical information
• Ability to analyze information, think critically, and exercise sound judgment when evaluating risks and security events
• Ability to manage multiple priorities, adapt to changing business needs, and work effectively both independently and collaboratively
• Strong written, verbal, and technical communication skills with the ability to communicate effectively with technical and non-technical audiences, The physical demands described below are representative of those that must be met by an employee to successfully perform this job’s essential functions. Reasonable accommodations may be made to enable individuals with disabilities to perform essential functions.
• Ability to work at a computer in a stationary position for up to 8 hours per day
• Ability to occasionally carry light materials (e.g., laptop, presentation materials)
• Ability to travel for business by car or air and stay in public accommodations as needed