Vice President, Information Security full Stack Engineer

Vice President, Information Security Full Stack Engineer

At BNY, our culture allows us to run our company better and enables employees' growth and success. As a leading global financial services company at the heart of the global financial system, we influence nearly 20% of the world's investible assets. Every day, our teams harness cutting-edge AI and breakthrough technologies to collaborate with clients, driving transformative solutions that redefine industries and uplift communities worldwide.

Recognized as a top destination for innovators and champions of inclusion, BNY is where bold ideas meet advanced technology and exceptional talent. Together, we power the future of finance – and this is what #LifeAtBNY is all about. Join us and be part of something extraordinary.

We're seeking a future team member for the role of Vice President, Information Security Full Stack Engineer to join our Cyber Technology team. This role is in New York, NY / Pittsburgh, PA.

Our Cyber Technology team builds and enhances secure applications that protect our enterprise IT environment. You'll develop internal platforms and tools used by cybersecurity teams to improve visibility, automate workflows, and strengthen controls across identity, endpoints, and network defenses. This role blends hands-on product delivery with secure engineering practices in a regulated financial services environment, with an emphasis on modern developer productivity and responsible use of AI-assisted tooling.

In this role, you'll make an impact in the following ways:

• Build and maintain full-stack web applications and services using modern engineering patterns.
• Design and consume REST and gRPC APIs with an emphasis on reliability, security, and maintainability.
• Apply secure coding standards (e.g., input validation, authentication/authorization, dependency hygiene, secrets handling).
• Support vulnerability remediation efforts by addressing findings from scanning tools and security reviews.
• Create dashboards and reporting experiences that provide actionable insights (e.g., control health, risk posture, remediation progress).
• Automate recurring operational processes to improve efficiency, reduce human error, and increase auditability.
• Collaborate with IAM, network security, endpoint, and governance teams to align applications with security strategy and controls.
• Participate in security assessments and contribute to compliance efforts aligned with organizational standards.
• Independently diagnose and resolve issues across the stack (frontend, backend, CI/CD, environments).
• Contribute to documentation, runbooks, and operational best practices as needed.
• Practical application of DevOps/CI/CD and SDLC best practices including code reviews, testing, and release pipelines.
• Leverage modern AI-assisted development tools to improve code quality, velocity, and maintainability where appropriate.

To be successful in this role, we're seeking the following:

• Bachelor's degree in Computer Science, Engineering, or a related field, or equivalent work experience.
• 6 to 10 years of experience in software engineering preferred with hands on delivery and a deep understanding of a programming language such as C# or Java or Python (or similar), and delivering those solutions via production services.
• Experience developing APIs and integrations (REST/gRPC), including testing and basic observability (logs/metrics).
• Hands-on experience with React or Angular (SwiftUI experience is a plus).
• Familiarity with vulnerability management concepts and secure SDLC practices.
• Awareness of common application security risks (e.g., OWASP Top 10) and how to mitigate them.
• Practical understanding of core networking protocols and enterprise environments (e.g., TCP/UDP, SNMP, firewalls, proxies).
• Working knowledge of Windows and Linux administration fundamentals.
• Experience using Python scripting to automate workflows and integrate systems/tools.
• Familiarity with IAM concepts (SSO, MFA, RBAC, OAuth/OIDC) and general Zero Trust principles.
• Strong problem-solving and communication skills; able to deliver independently while collaborating in a team.

Preferred Qualifications:

• Experience building dashboards and reporting (security KPIs, trend reporting, operational metrics).
• Familiarity with cloud platforms and containerization (Docker/Kubernetes) and secure deployment practices.
• Experience building client-server applications for macOS and Windows.
• Experience using AI-assisted development tools (e.g., Windsurf, Cursor, or similar) to accelerate development, refactoring, testing, or code comprehension in a secure and responsible manner.

BNY offers highly competitive compensation, benefits, and wellbeing programs rooted in a strong culture of excellence and our pay-for-performance philosophy. We provide access to flexible global resources and tools for your life's journey. Focus on your health, foster your personal resilience, and reach your financial goals as a valued member of our team, along with generous paid leaves, including paid volunteer time, that can support you and your family through moments that matter.

BNY is an Equal Employment Opportunity/Affirmative Action Employer - Underrepresented racial and ethnic groups/Females/Individuals with Disabilities/Protected Veterans.