Information Security Engineer I

Responsibilities

• Supports the bank's operational goals by assisting in the monitoring, analyzing, and maintaining EagleBank's technical security controls in support of the Information Security Program.
• Focuses on assisting with network security operations to host and network-based controls, including antivirus, endpoint detection and response (EDR), host intrusion prevention systems (HIPS), intrusion prevention systems (IPS), application whitelisting, firewall, data loss prevention (DLP), security incident and event monitoring (SIEM), network monitoring, etc.
• Safeguards the security of EagleBank applications and network through creation and timely execution of project plans, tool installations, system upgrades, and integrating risk-based threat intelligence into the operational environment, ensuring effective execution of technical security controls to manage risks to confidentiality, integrity, and availability of EagleBank's information systems and infrastructure.
• Performs support triage and analysis of security events escalated from the Tier1 and Tier-2 support teams and is supported by guidance from the Senior Information Security Engineer.

Requirements

• Bachelor’s Degree in Arts/Sciences (BA/BS) Computer Science, Information Systems, Information/Cybersecurity or related focused technical training
• Or 4 additional years of engineering and project management experience
• 4 years experience in a combination of information security operations / engineering / administration with emphasis on operations and maintenance of security tools
• 2 years experience with designing, troubleshooting, and implementing information security technologies
• 2 years experience supporting vulnerability management / agents in a Windows environment
• Knowledge of TCP/IP networking: networking topology, protocols and services
• Familiarity with security tools (Vulnerability Management, SIEM, NIDS/NIPS, Endpoint Security, Web proxies, firewalls)
• Familiarity with at least one security best practice standard such as the Center for Internet Security (CIS) Top 20 Critical Security Controls, NIST Cybersecurity Framework, ISO27001 controls, PCI-DSS, or equivalent
• Excellent knowledge of Microsoft Operating system; knowledge of Linux operating system is a plus
• Familiarity with networking technology and protocols, including routers, switches, VPNs, Citrix, email gateways, etc.
• Intermediate level skill providing input and support into technology projects
• Experience assisting with Tier-1 and Tier-2 ticket escalations, troubleshooting, and ticket resolution
• Hand-on experience with security tools (Application Security, Network Anomaly Detection, Incident Response, email gateway, etc)
• Familiarity with deployment and management of vulnerability management tools / agents (Rapid 7, Tenable, Qualys)

Preferences

• 2 years experience administering (monitor, upgrade, troubleshoot) Linux servers
• 2 years experience with information security on the public cloud (Azure/AWS) environment
• 2 years security engineering / administration in the financial sector