Cyber Security Engineer III

Job Title

This is a remote role that can only be hired remote in NC, AZ, TX, NE, FL.

Responsibilities

Technical Security - Administers tools or processes that secure assigned technical areas and data. Participates in security audits, identifies security gaps, and develops and implements risk mitigation solutions. Ensures compliance with necessary protocols, configurations, or procedures.

Analysis - Identifies and evaluates potential sensitive data exfiltration in the Bank's networks, applications, or systems. Compiles data from internal sources. Understands general industry best practices for data protection handling across enterprise domains. Develops complex solutions and process improvements.

Security Expertise - Maintains a current knowledge of technology, emerging threats, and security trends within the assigned technical area. Advises on the development, enhancement, and monitoring of Insider Threat, Data Loss Prevention, Data Classification teams and its technologies. Provides guidance on appropriate data protection methodologies. Acts as a consultative resource to business and corporate functions on data loss policies and the bank's associates. Leads projects and serves as a resource to other business units.

Governance – Provides guidance on data protection strategies and tactical approaches for the enterprise. Assists in reviewing and drafting the enterprise standards. Reviews and recommends business requested exceptions via a risk-based framework. Ensures compliance with all applicable requirements and service standards.

Business Strategy - Assists senior leadership in the development of security policies, standards, and strategies.

Qualifications

Bachelor's degree with a minimum of 6 years of experience in systems engineering, networking or information security technologies -OR- High school diploma or GED with a minimum of 10 years of experience in systems engineering, networking or information security technologies

Skill(s): Knowledge of data security practices, procedures. monitoring and alert tools (SCCM, SCOM, and Splunk), and risk management standards, Knowledge of Active Directory administration and user provisioning, Domain Name System, Group Policy Objects, New Technology File System permissions, File Shares, SharePoint, Domain controllers, Lightweight Directory Access Protocol, data loss prevention technologies, encryption technologies, and single sign on technologies, Ability to clearly communicate risks, threats, and vulnerabilities identified during assessments.