Security Engineer

• Design, implement, configure, maintain, and support the end-to-end Security Framework including, IPS/IDS, endpoint protection, email and URL filtering (DMARC/DKIM/SPF), SIEM, vulnerability assessment/scanning, ATP solutions, DLP solutions, MFA and SSO solutions, cloud security, WAFs, and more.
• Lead Security Operations – configure alerts to protect against cyber threats, review configurations, and tune systems as needed.
• Respond to and investigate potential or actual security incidents.
• Lead all phases of Incident Response (Preparation, Identification, Containment, Eradication, Recovery, and Lessons Learned).
• Handle escalated security alerts and approve mitigation plans.
• Research, evaluate, design, configure, and maintain security solutions.
• Develop and manage the Vulnerability Management Program, review scan results, and approve mitigation plans.
• Perform penetration testing and coordinate third-party testing; review results and remediation plans.
• Conduct risk assessments, document threats and vulnerabilities, and develop mitigation strategies.
• Evaluate current systems and recommend improvements.
• Perform health checks and best practice reviews for security solutions.
• Conduct threat modeling/hunting using industry frameworks.

Senior Information Security Engineer

Distinguished Technologist – Security Architect

Product Security Engineer

Senior Bank Information Security Governance

Security Research Manager, Coverage Team

Bank Information Security Governance Lead