develop, implement and maintain solutions that support the safeguarding of the bank's systems and sensitive information
provision of subject matter expertise on security systems and engineering patterns
development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems
management and protection of secrets, ensuring that they are securely generated, stored, and used
execution of audits to monitor, identify and assess vulnerabilities in the banks infrastructure/software and support the response to potential security breaches
collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements
development/ implementation and maintenance of Identity and Access Management solutions and systems

experience with the software security landscape: CVEs, CWEs, common software vulnerability types SAST, SCA, and DAST, including the strengths and weaknesses of each
at least one programming language (e.g. Java, Go)
at least one major cloud provider (e.g. AWS, GCP, Azure)
REST API design
HTTP Authentication
Linux at the terminal, including scripting and automation (e.g. shell, Python)

Security Engineer

Key skills