Security Engineer

Job Description Summary:

The Security Engineer is responsible for designing, implementing, monitoring, and improving technical security controls across on-premises, cloud, SaaS, and endpoint environments. This role partners closely with infrastructure, application, cloud, and operations teams to ensure technology solutions align with the Bank's security standards and risk management objectives.
Justification: We require additional assistance with executing our roadmap items. This has been discussed and approved by Security Management.
Key Responsibilities: Security Engineering & Architecture

• Design, implement, and maintain technical security controls across infrastructure, cloud, SaaS, and endpoint
• Evaluate emerging technologies, security capabilities, and vendor solutions.
• Provide security consultation and design reviews for new projects and technology initiatives.
• Collaborate with engineering teams to integrate security requirements into technology deployments.

Baseline Security Configuration (BSC) Program

• Develop, maintain, and improve Baseline Security Configurations for enterprise
• Partner with technology owners to assess compliance and remediate gaps.
• Support control selection, implementation guidance, exception management, and validation activities.
• Track remediation efforts and provide reporting on compliance posture.

Cloud & SaaS Security

• Support security controls and governance within AWS, Microsoft Azure, and SaaS platforms.
• Assess cloud services against security standards and best practices.
• Participate in cloud security initiatives, security monitoring, and compliance assessments.
• Assist with onboarding and securing new cloud and SaaS technologies.

Security Operations & Tool Administration

• Administer and improve enterprise security tools and platforms.
• Develop automation and operational efficiencies to enhance security processes.
• Monitor security control effectiveness and identify improvement opportunities.
• Assist with troubleshooting and resolving security-related technical issues.

Risk, Governance & Collaboration

• Partner with first, second, and third line teams to identify and reduce security risk.
• Contribute to security standards, procedures, and technical documentation.
• Support audits, risk assessments, and regulatory compliance activities.
• Communicate technical security concepts clearly to both technical and non-technical audiences.