Principal Security Engineer

The Principal Security Engineer will lead and evolve enterprise security architecture, engineering, and cyber risk management capabilities. They will establish strategy, standards, and roadmaps across vulnerability management, cloud security, application security, infrastructure security, identity security, and emerging technology domains.

What You Will Do

Responsibilities include establishing and maintaining security engineering capabilities and processes, assessing and governing emerging technologies, leading risk-based security assessments and remediation efforts, designing and implementing security controls, and developing and maintaining security architecture standards.

Why It Might Be a Fit

The ideal candidate will have deep knowledge of enterprise vulnerability management frameworks, processes, and lifecycle management, as well as strong analytical skills to correlate vulnerability data and drive meaningful prioritization.

Requirements

• Deep knowledge of enterprise vulnerability management frameworks, processes, and lifecycle management across infrastructure, cloud, application, endpoint environments.
• Strong understanding of asset management concepts, including ITAM, CMDB, asset ownership and lifecycle governance.
• Expert knowledge in threat modeling and risk management.
• Strong understanding of secure cloud architecture principles, shared responsibility models, common cloud configuration risks.
• Strong analytical skills to correlate vulnerability data, asset criticality and exposure to drive meaningful prioritization.
• Familiarity with OWASP top 10 and web application security principles
• Strong knowledge of application security, web and application design, databases, operating systems, hypervisors, IP networks, microservices, container technology, system integration technologies and securing cloud-based applications.
• Strong understanding of banking regulations and third-party risk.
• Excellent verbal and written communication skills.
• Strong interpersonal skills to facilitate building positive working relationships at all levels within the bank.
• Ability to handle multiple priorities simultaneously.
• Ability to lead cross-functional discussions, remediation working sessions, and status forums to drive accountability and reduce risk.

Benefits

• health insurance
• 401(k) or retirement plan
• paid time off (vacation, sick leave, etc.)
• equity or stock options
• learning budget or professional development opportunities
• parental leave or family benefits
• wellness programs or employee assistance programs
• visa or relocation assistance
• remote work flexibility
• stipends or bonuses
• paid holidays