Information Security Engineer - Vulnerability Management III

About the role

The Information Security Engineer will focus on vulnerability management, supporting day‑to‑day data security operations and ensuring the availability and integrity of security and networking infrastructure. The role involves collaborating with multiple teams to define, deliver, and maintain enterprise security tools and processes.

Key responsibilities

• Define, deliver, and support enterprise security tools and architecture in collaboration with other teams.
• Enhance the Bank's network vulnerability management program for subsidiaries and affiliates.
• Lead implementation and onboarding of new applications, programs, and projects into the Enterprise Vulnerability Management Program.
• Communicate, escalate, and guide resolution of open vulnerabilities across infrastructure, application security, and configuration management.
• Conduct security research on threats and remediation techniques, and oversee implementation.
• Proactively monitor and investigate security alerts from managed security service providers and in‑house tools.
• Perform risk assessments to evaluate existing controls and the impact of proposed changes.
• Support ad‑hoc reporting requests and provide control evidence as needed.
• Perform threat analysis and incident response, interpreting security events.
• Develop and maintain standards, procedures, and guidelines for the Enterprise Vulnerability Management Program.
• Share knowledge and industry best practices with team members and serve as a security engineer/consultant on projects.

Required profile

• Excellent communication and presentation skills with experience presenting to senior leaders.
• Proven experience in vulnerability management, security engineering, and security consulting.
• Solid understanding of popular security tooling and security architecture.
• Experience with proactive threat management, research, escalation, and discovery.
• Nice to have: CISSP, CISA, CISM, AWS Solutions Architect certifications.
• Nice to have: GRC/audit management experience and scripting/automation (Python).

Required skills

• Qualys
• Brinqa
• Archer
• ServiceNOW
• Checkmarx
• Prisma
• AWS
• Python

What we offer

• Competitive base salary
• Medical, dental, and vision insurance coverage
• Optional life and disability insurance
• 401(k) with company match and optional profit sharing
• Paid vacation time and bench time
• Training allowance
• Referral bonuses