> Markdown version of [/jobs/ext/4690349-information-security-engineer-woodbridge-nj](https://www.wearedevelopers.com/jobs/ext/4690349-information-security-engineer-woodbridge-nj). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Information Security Engineer - Woodbridge, NJ - **Company:** Provident Financial Services - **Location:** Woodbridge Township, NJ, United States - **Experience:** Expert - **Salary:** $77,000 - $110,000 - **Contract:** Permanent contract - **Skills:** Microsoft Windows, Application Programming Interfaces (APIs), Software System Penetration Testing, Audit Trail, Microsoft Azure, Backup Devices, Bash Shell, Software as a Service, Cloud Computing, Cloud Computing Security, CompTIA Security+, Cyber Security, Information Systems, Data Security, Data Stores, Multi-Factor Authentication, Identity and Access Management, Information Security Management, Mobile Application Software, Python (Programming Language), Key Management, Microsoft Software, Network Segmentation, PCI Data Security Standards, Windows PowerShell, Systems Development Life Cycle, Proprietary Software, Role-Based Access Control, Azure Active Directory, Cloud Services, Secure Coding, Single Sign-On, Software Engineering, Data Streaming, Systems Integration, Software Vulnerability Management, Web Applications, Data Logging, Scripting, Software Security, Kubernetes, Information Technology, CIS Benchmarks, Purple Team (Cyber Security), Network Server, Devsecops, Static Application Security Testing, Dynamic Application Security Testing - **Published:** November 12, 2026 - **Apply:** https://www.careerbuilder.com/job-details/information-security-engineer-woodbridge-nj-woodbridge-nj--b78173ca-82d5-47b3-9938-d2136422e352 ## About the Role Information/Data Security (InfoSec), Risk, Internal Audit, Software Development, Enterprise Architecture, Regulations, Vendor/Supplier Evaluation, Information/Data Security (InfoSec), Banking Operations, Computer Security, * Familiarity with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Purview, containers or Kubernetes, infrastructure-as-code, and secure use of artificial intelligence services. * Experience with security tool health checks, control testing, business continuity and disaster recovery, vendor management, audit evidence, KRIs/KPIs, and risk-exception processes. * Broad technical knowledge across networking, operating systems, identity and access management, cloud and SaaS security, application and API security, data protection, vulnerability management, security architecture, and security monitoring concepts. * Hands-on experience implementing, administering, integrating, testing, or assessing enterprise security technologies and secure configurations across hybrid environments. * Experience performing technical security assessments, documenting control gaps, coordinating remediation, validating evidence, and communicating residual risk to technical and nontechnical stakeholders. * Experience with automation or scripting using PowerShell, Python, Bash, APIs, infrastructure-as-code, or comparable tools to improve repeatability, evidence collection, and control validation. * Working knowledge of security frameworks and banking expectations, including NIST Cybersecurity Framework, NIST 800-53, CIS Benchmarks, FFIEC guidance, GLBA Safeguards, NYDFS Part 500, PCI DSS, and applicable privacy requirements. * Ability to translate technical findings into clear risk statements, remediation plans, standards, procedures, and concise communications for technology teams, management, auditors, and regulators. * Demonstrated judgment, ownership, attention to detail, project coordination, documentation discipline, and ability to manage multiple priorities in a regulated environment. WORK EXPERIENCE: * 5+ years of hands-on information security, security engineering, infrastructure security, application security, or enterprise security operations experience in production environments. * Experience in banking, financial services, or another highly regulated industry. * Experience with application and API security, secure SDLC/DevSecOps, SAST/DAST, penetration testing, threat modeling, and red or purple team activities. EDUCATION: * Bachelor's degree in cybersecurity, computer science, information systems, engineering, or a related field; equivalent relevant experience will be considered. LICENSES AND/OR CERTIFICATES: * Relevant certifications such as CISSP, CCSP, CISM, GIAC, OSCP, Security+, Microsoft AZ-500, SC-100, SC-200, SC-300, or comparable credentials preferred. ## Description The Information Security Engineer is a hands-on member of Provident Bank's Information Security team responsible for engineering, validating, and governing preventive security controls across applications, infrastructure, networks, data stores, cloud services, and approved third-party platforms. The role partners with Infrastructure Engineering, Enterprise Architecture, Application Development, Digital Security Operations (DSO), Identity Governance and Assurance (IGA), Governance, Risk and Compliance (GRC), Internal Audit, business stakeholders, and vendors to reduce the likelihood of successful attacks against the Bank's digital properties and banking operations. The engineer establishes security standards and guardrails, performs architecture and risk reviews, operates assigned security technologies, validates control effectiveness, and produces evidence demonstrating alignment with Bank policy, risk appetite, and regulatory obligations., * Engineer, administer, and continuously improve assigned enterprise security technologies across edge security, email security, identity controls, data protection, cloud security, application security, attack-surface management, and security posture management. * Develop, document, test, and maintain security standards, secure configuration baselines, hardening guides, architecture guardrails, and control requirements for third-party software, applications, servers, endpoints, networks, data stores, cloud services, SaaS platforms, APIs, and integration layers. * Perform security architecture reviews, threat modeling, technical risk assessments, and pre-production control validation for new systems, major changes, vendor integrations, data flows, cloud services, and emerging technologies, including artificial intelligence services. * Support application security for mobile applications, web applications, APIs, and integrations by evaluating authentication, authorization, secrets handling, secure development practices, code and dependency risks, and SAST/DAST or equivalent testing results. * Validate cloud and hosted-environment controls, including identity, network segmentation, encryption, key and secrets management, logging, backup and recovery, workload protection, configuration compliance, and cloud or data security posture management. Implement and validate identity-first controls, including Microsoft Entra ID, single sign-on, multifactor authentication, conditional access, privileged access management, least privilege, service principals, workload identities, and role-based access control, in coordination with IGA and technology owners. * Operate the ESO security tool governance lifecycle, including onboarding, configuration reviews, health checks, entitlement reviews, vendor service reviews, upgrade planning, resilience and disaster-recovery playbooks, control testing, exception tracking, and retirement activities. * Coordinate internal and external penetration tests, red or purple team exercises, and specialized security assessments; manage scope and Rules of Engagement, vendor onboarding, testing support, findings readouts, remediation tracking, evidence collection, retesting, and formal closure. * Partner with technology and business owners to remediate vulnerabilities, insecure configurations, excessive privileges, unsupported components, and control gaps; document ownership, target dates, compensating controls, risk exceptions, and validation results. Integrate and validate relevant telemetry, alerts, and audit logs for security tools and in-scope platforms. Partner with DSO on detection requirements, alert triage, threat hunting, escalated investigations, incident response, and forensic preservation while maintaining clear ESO and DSO accountability. * Support data protection through classification, Microsoft Purview or approved DLP controls, encryption, key management, retention, secure deletion, and validation of controls protecting customer and Bank information. Maintain accurate architecture diagrams, asset and security-tool inventories, operating procedures, standards, playbooks, evidence, KRIs/KPIs, remediation trackers, and management reporting for audits, regulatory examinations, governance committees, and continuous improvement. * Represent ESO in assigned project, Architecture Review Board, change-management, vendor, and technology governance activities; provide practical security direction and clearly communicate risks, dependencies, and required controls. Participate in after-hours support or incident-response activities when ESO engineering expertise is required and coordinate with DSO, managed service providers, and critical vendors., Does not carry out supervisory responsibilities. OTHER DUTIES: Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice. WORKING CONDITIONS: * Prolonged sitting * Lifting from 5 to 10 lbs (printer paper, storage boxes) * Occasional bending or overhead lifting (storing files or boxes) Work is performed in a normal office environment. Noise levels are usually moderate. May also involve travel to customers and property locations. HAZARDS: The hazards are mainly those present in a normal office setting and those present in commuting by car. Occasionally, they may be exposed to those conditions present in public forums and meeting places. This job description may not be all-inclusive. Employees are expected to perform other duties as assigned and directed by management. Job descriptions and duties may be modified when deemed appropriate by management. Provident Bank recognizes and supports the importance of creating a socially and culturally diverse employee base. We understand, value, and appreciate the unique perspectives that a diverse workforce can contribute to our organization. We put the employee and the customer at the center of strategy because culture is a critical differentiator for why people choose to work here.