Monitor and evaluate threats to cloud-hosted digital banking solutions
Assess applications and infrastructure for vulnerabilities
Operate technical controls to safeguard sensitive data
Lead and support incident response efforts using industry-standard practices
Collaborate with risk management, compliance, and audit functions
Use and optimize monitoring, reporting, and alerting capabilities
Maintain and refine threat models to prioritize risk management activities
Use and maintain vulnerability scanning and penetration testing tools
Collaborate with clients, auditors, vendors, and internal teams
Investigate reported vulnerabilities and risks
Develop and implement strategies, scripts, configurations, and procedures to reduce security risks
Operate and enhance security solutions including firewalls, DLP tools, CASBs, AV/EDR systems
Participate in formalized security incident response procedures
Collect and document evidence of security program activities
Requirements
Associate degree in Computer Science, Management Information Systems, Information Assurance, Information Security, Cybersecurity, or related field required; or equivalent self-study in cybersecurity with demonstrated command of key concepts and technologies and proficiency in digital forensics, incident response, secure application development, penetration testing, or other technical security risk management domains required.
Relevant industry certifications such as CISSP, GCIA, GCIH, Security+, AWS Security Specialty, or similar preferred.
Ten (10) years of experience in a relevant technology domain including software engineering, information technology, systems administration, technical fieldwork, or information assurance required.
Six (6) years of demonstrated experience identifying threats, finding and confirming vulnerabilities, and managing remediation efforts in a team environment as a Security Analyst, Operations Analyst, DevSecOps team member, or similar role required; or practical certifications/accomplishments (e.g., cyber range or CTF competitions) demonstrating ability to identify and handle security risks relevant to a hosted digital banking environment required.
Experience with AWS, Linux, Git, log aggregation platforms, issue tracking systems, and coding in Bash, Node.js, Python, or Ruby desired.