Information Security Engineer

We need to output HTML fragment with headings

for sections that have real content: About the role? The posting includes an intro paragraph about Firstrust Bank, mission, benefits, performance-based pay, etc. That could be "About the role" or maybe "About the company". The instruction: use

for section headings (e.g. About the role, Responsibilities, Requirements, Qualifications, Skills, Benefits, Pay, Schedule). We need to include sections only when posting has real specific content. We must not repeat job title as heading. No Job ID etc. Remove boilerplate like EEO, accommodation instructions, etc. Also remove duplicated lines. We need to preserve all substantive information. So we need to extract: - Intro paragraph: "FIRSTRUST BANK Recognizes the leader in you As one of the region’s foremost community banking institutions, we take pride in fostering leadership. As a Firstrust employee, your growth is our growth. For you, that means great benefits, performance-based pay, a meaningful role, and resources to help your success. For us, that means employees who offer exemplary customer service with a commitment to our values - honesty, integrity and accountability. Hybrid Position* We are seeking a highly skilled and motivated Information Security Engineer to join our IT Security team." We could put that under

About the role

maybe. Or "About the company". The instruction says use headings like About the role, Responsibilities, etc. So we can use About the role. Then Responsibilities: list of duties broken into categories: Network & Cloud Security (SASE, CASB, Firewalls), Threat Hunting & Incident Response, Business Continuity & Disaster Recovery (BC/DR), Microsoft Purview: Data Governance & eDiscovery, Other Job Duties And Responsibilities (assists in development of new business, etc). We need to output as

• for any list of duties/requirements/benefits. So each bullet point can be a duty. Could group under subheadings? Not required but we can keep as list items. Then Requirements/Qualifications: Education, Training And Experience: Bachelor's degree..., 5+ years..., Technical Expertise list (firewalls, threat hunting, SIEM/XDR, SASE/CASB, Microsoft Purview, MITRE ATT&CK, query languages, BC/DR documentation, regulated industry frameworks). Also Communication & Collaboration: strong written communication, partner with non-technical business units. We need to decide whether to separate Requirements and Qualifications or combine. The instruction gives examples: Requirements, Qualifications, Skills. We could have a section

  Qualifications

  containing education, experience, technical expertise, communication. Or separate Requirements (education/experience) and Skills (technical). But we should not create thin sections; prefer few substantive sections. So maybe one

  Qualifications

  covering all. Benefits: The intro mentions great benefits, performance-based pay. But no specific benefits listed. The instruction: never create Benefits section unless posting actually states them. It says "great benefits" but not specific. That's vague; maybe we should not create Benefits section because no specific benefits listed. Similarly Pay: mentions performance-based pay but not specific numbers; we should not create Pay section unless actual pay stated. Schedule: mentions Hybrid Position* but no specific schedule details; we could maybe include Schedule? The instruction: never create Pay/Schedule/Benefits sections unless posting actually states them. It says Hybrid Position* but not schedule details like remote days. Might be considered schedule info? It's vague. Safer to omit Schedule section. Thus sections: About the role, Responsibilities, Qualifications. We need to output only HTML fragment, no markdown fences. Let's craft:

  About the role

  Firstrust Bank, a leading community banking institution, fosters leadership and employee growth. As a Firstrust employee you receive great benefits, performance‑based pay, a meaningful role, and resources to support your success. The bank values honesty, integrity, and accountability, and seeks employees who deliver exemplary customer service. This is a hybrid position for an Information Security Engineer on the IT Security team.

  Then Responsibilities:

  Responsibilities

  • Network & Cloud Security (SASE, CASB, Firewalls):
    • Design, deploy, and maintain Next‑Generation Firewall (NGFW) policies and rules ensuring least‑privilege access.
    • Manage and optimize the Secure Access Service Edge (SASE) architecture to support a secure remote/hybrid workforce.
    • Implement and monitor Cloud Access Security Broker (CASB) solutions to gain visibility into shadow IT, enforce data compliance, and prevent data leakage across SaaS applications.
    • Maintain firewall change management processes, including peer review, staging/testing, and post‑change validation.
  • Threat Hunting & Incident Response:
    • Proactively conduct threat hunting campaigns across network, endpoint, and cloud logs to identify anomalous behavior and latent threats that bypass traditional security controls.
    • Analyze security telemetry (SIEM/XDR) to reconstruct attack vectors and develop custom detection rules.
    • Act as a core member of the Incident Response team, including containment, eradication, and post‑incident analysis.
    • Maintain current awareness of emerging threat actor groups, CVEs, and exploitation trends relevant to the industry and technology stack.
    • Remain available outside of standard business hours to respond to escalated, high‑priority security events as needed.
  • Business Continuity & Disaster Recovery (BC/DR):
    • Collaborate with business stakeholders to develop, maintain, and update Business Continuity and Disaster Recovery plans.
    • Coordinate and lead regular BC/DR tabletop exercises and technical disaster recovery drills (failovers, backups restoration).
    • Ensure defined RPOs and RTOs are achievable, tested, and aligned with regulatory requirements — flagging gaps to leadership with clear remediation paths.
  • Microsoft Purview: Data Governance & eDiscovery:
    • Administer and optimize the Microsoft Purview compliance suite with hands‑on ownership of Information Protection (sensitivity labels, auto‑labeling policies), Data Loss Prevention (DLP) policies across M365 and endpoint, Compliance Manager (assessment tracking, control mapping), and Advanced eDiscovery.
    • Design and manage end‑to‑end eDiscovery workflows: creating review sets, applying legal holds, running targeted content searches, managing custodian communications, and producing defensible data exports in coordination with legal counsel.
    • Develop and refine DLP policies to reduce false positives, improve policy coverage, and generate actionable alerts — working with business units to balance security with operational productivity.
    • Monitor Purview audit logs and compliance dashboards, escalating anomalies and producing regular reports for security leadership and legal/compliance stakeholders.
  • Other Job Duties:
    • Assist in the development of new business for Firstrust.
    • Stay alert to expressed customer/prospect needs to suggest appropriate services.
    • Direct customers to the appropriate person to establish business relationships.
    • Perform other duties as assigned.
  But note: nested
  inside
  • is okay but maybe we want flat list? The instruction: Use
    • for any list of duties/requirements/benefits. It didn't forbid nesting. Could keep flat list with each duty as a separate
    • and include the category text inside. Simpler: each duty as a
    • with the description. Let's do flat list to avoid complexity. Thus:

      Responsibilities

      • Network & Cloud Security (SASE, CASB, Firewalls): Design, deploy, and maintain Next‑Generation Firewall (NGFW) policies and rules ensuring least‑privilege access; manage and optimize the Secure Access Service Edge (SASE) architecture to support a secure remote/hybrid workforce; implement and monitor Cloud Access Security Broker (CASB) solutions to gain visibility into shadow IT, enforce data compliance, and prevent data leakage across SaaS applications; maintain firewall change management processes, including peer review, staging/testing, and post‑change validation.
      • Threat Hunting & Incident Response: Proactively conduct threat hunting campaigns across network, endpoint, and cloud logs to identify anomalous behavior and latent threats that bypass traditional security controls; analyze security telemetry (SIEM/XDR) to reconstruct attack vectors and develop custom detection rules; act as a core member of the Incident Response team, including containment, eradication, and post‑incident analysis; maintain current awareness of emerging threat actor groups, CVEs, and exploitation trends relevant to the industry and technology stack; remain available outside of standard business hours to respond to escalated, high‑priority security events as needed.
      • Business Continuity & Disaster Recovery (BC/DR): Collaborate with business stakeholders to develop, maintain, and update Business Continuity and Disaster Recovery plans; coordinate and lead regular BC/DR tabletop exercises and technical disaster recovery drills (failovers, backups restoration); ensure defined RPOs and RTOs are achievable, tested, and aligned with regulatory requirements — flagging gaps to leadership with clear remediation paths.
      • Microsoft Purview: Data Governance & eDiscovery: Administer and optimize the Microsoft Purview compliance suite with hands‑on ownership of Information Protection (sensitivity labels, auto‑labeling policies), Data Loss Prevention (DLP) policies across M365 and endpoint, Compliance Manager (assessment tracking, control mapping), and Advanced eDiscovery; design and manage end‑to‑end eDiscovery workflows: creating review sets, applying legal holds, running targeted content searches, managing custodian communications, and producing defensible data exports in coordination with legal counsel; develop and refine DLP policies to reduce false positives, improve policy coverage, and generate actionable alerts — working with business units to balance security with operational productivity; monitor Purview audit logs and compliance dashboards, escalating anomalies and producing regular reports for security leadership and legal/compliance stakeholders.
      • Other Job Duties: Assist in the development of new business for Firstrust; stay alert to expressed customer/prospect needs to suggest appropriate services; direct customers to the appropriate person to establish business relationships; perform other duties as assigned.
      Now Qualifications section: We need to include Education, Training And Experience, Technical Expertise, Communication & Collaboration. We'll make a flat list as well.

      Qualifications

      • Education: Bachelor’s degree in Computer Science, Cyber Security, Information Technology, or equivalent practical experience.
      • Experience: 5+ years of progressive experience in cybersecurity engineering or a dual security/compliance role.
      • Technical Expertise:
        • Hands‑on production‑level configuration and administration of Next‑Generation Firewall (NGFW) platforms.
        • Demonstrated experience running structured threat hunting campaigns, not just reactive alert investigation; ability to articulate past hunts, methodologies used, and outcomes achieved.
        • Proficiency in KQL (Microsoft Sentinel) and/or Splunk SPL for threat hunting, detection engineering, and forensic analysis.
        • Experience administering or supporting SASE/CASB platforms.
        • Meaningful hands‑on experience with Microsoft Purview: DLP policies, Compliance Manager, Information Protection, Advanced eDiscovery.
        • Strong understanding of threat actor TTPs (MITRE ATT&CK framework) and query languages (e.g., KQL, Splunk SPL) for threat hunting.
        • Experience writing, testing, and auditing BC/DR documentation and participating in routine exercises.
        • Experience in a regulated industry (finance, healthcare, etc.) with frameworks such as SOC 2