EDUCATION Degree or equivalent work experience equally preferable Degree in computer science, information security, or related discipline Knowledge in cybersecurity CERTIFICATIONS Certified Ethical Hacker (CEH) Certified in Governance, Risk and Compliance (CGRC; formerly Certified Authorization Professional [CAP]) Certified Information System Auditor (CISA) Certified Information Systems Manager (CISM) Certified Information Systems Security Professional (CISSP) Certified Project Management Professional (CPMP) GIAC Certified Incident Handler (GCIH) GIAC Security Essentials Certification (GSEC) Global Information Assurance Certification (GIAC) Imperva Database Security Specialist (IDSS) Microsoft Certified Software Engineer (MCSE) Offensive Security Certified Professional (OSCP) Security+ Six Sigma SysAdmin, Audit, Network and Security (SANS)

WORK EXPERIENCE

Technical experience in cybersecurity, insider threat, incident response, security operations, or related information security field Experience working in encryption engineering, network security, PKI engineering, systems and software security (SSS), threat and vulnerability management (TVM), or related field

FUNCTIONAL SKILLS

Access control conformance
Act independently
Adaptation
Advanced Interactive eXecutive (AIX)
Analytical (i.e. technical and non-technical problem-solving)
Analytics for decision-making and measurement progress/performance
Analyze various methods controlling information security problems
Apache Cassandra
Apache Hadoop
Apache Spark
Apple MAC
Application security
Infrastructure security
Application software which effect the integrity, functionality, and reliability the Banks network and systems
Application transaction
Apply information security theories and concepts to specific circumstances
Aptitude to lead complex efforts
Architecture diagrams
Articulate security risks and appropriate controls
Automation through scripting and/or programming
Amazon Web Services (AWS)
Azure
Building and operating a data protection and compliance program
Business processes in the financial/government sector
Capdo data analytics and draw risk conclusions based on activities seen
CCPA/CPRA
Certificate management tool Venafi
Continuous Integration/Continuous Delivery (CI/CD)
CIS-Benchmark
Cloud encryption solutions
Cloud PKI
COBIT
Common cybersecurity frameworks
Common OS operation
Communicate clearly and concisely with peers and all levels leadership.
Communication and presentation
Complex project management
Conceptual processes and system characteristics in the security space
Convey complex concepts to a broad audience (technical and non-technical)
Convey technical findings in simple language
Create a level security awareness throughout the Bank for accountability and responsibility
Create native productivity aids and command scripts
Creative problem solving
Cryptographic implementations at media
CVSS
Cybersecurity
DAM
Data analytics and draw risk conclusions based on activities seen
Data classification solutions
Data protection strategies
Databases security configuration
DB2
Demonstrate vulnerabilities
Determine the strengths and weaknesses each method and implement the best cost-justified solution
Development of insider Threat policies and standards
DevSecOps methodologies
Distributed Denial Service (DDoS) Protection
Documentation writing that present both a business and technical viewpoint
Domain Name System (DNS)
Drive vulnerability management reporting
Email Security
Encryption Engineer
Encryption security products
Encryption solutions
Entrepreneurial mindset by applying frameworks for resource alignment on goals and objectives
Evaluate application software which impact the integrity, functionality, and reliability of the banks network and systems
Evaluate business process which impact the integrity, functionality, and reliability of the banks network and systems
Evaluate the impact to existing security systems
Exabeam
Excel (VLOOKUP/pivot tables/charts)
Explain risk
Extranet networks
Facilitate remediation coaching
FFIEC
File Transfer Protocol (FTP) functionality
Firewalls
Formal stand-up presentations to all levels management
GLBA
Gramm-Leach-Bliley Act (GLBA)
Hyper Text Transfer Protocol/Secure (HTTP/HTTPs)
Identify weak links in information security products
Implement the best cost-justified solution
Implementation of insider Threat policies and standards
Industry trends and current security practices
Influence and communicate cross-functionally all levels management.
Information security theories and concepts to specific circumstances
Insider risk management governance
Internet
Internet Relay Chat (IRC)
Interpersonal communication
Intrusion Detection System (IDS)
ISO 27001
Lead pro-active reviews and self-assessments the policies
Liaise business
Linux
Listener
Log management solutions
Mac
Maintenance of insider Threat policies and standards
Major database platforms
Manage and lead teams multiple individuals
Manage application and infrastructure security assessments
Manage complex projects
Manage information security control assessments
Managing initiatives such as assessments
Mechanics of OS exploits of preventive and detective controls
Methods of controlling information security problems
Microsoft SQL
Mitigate the control deficiencies
Mitigations changes and risks
MITRE ATTCK framework
Modern security principles and its practical applications.
MongoDB
MSSQL
Multifactor Authentication (MFA)
MySQL
National Institute of Standards (NIST)
Network
Network appliances
Network security
Network traffic analysis
Network/system forensic tools
Networking fundamentals (e.g. TCP/IP) and troubleshooting
NIST CSF
NIST framework
Nnative productivity aids and command scripts.
NoSQL
O365
Operating in hybrid-cloud environment
Operating system (OS) internals
Operating system changes evaluate the impact to existing security systems
Operating systems and their versions and security systems in use at the Bank
Operating systems security configuration
Operational auditing in the financial/government sector
Oracle
Oracle TDE
Oral communications
Organize and establish processes in need of improvement
Outstanding oral and written communications
Oversee workloads and support direct reports to success while meeting objectives senior management
OWASP
Passionate
PCI
Perimeter Network Security
Perl
Positive and driven attitude
PowerShell
Prepare detailed task plans outlining all requirements to complete the given assignment
Presentation
Prioritizing and organizing day to day tasks and needs as appropriate
Proactive mindset and actions
Procedures and systems
Program management
Programming language to automate tasks
Protection and monitoring
Provide leadership and guidance to IT teams in patching and solutions to mitigate security threats
Provide technical direction to other peer staff members
Proxy
Public Key Infrastructure (PKI)
Python
Qualys
Rapid7
RegEx
Regulatory and risk partners to satisfy legal and regulatory requirements and avoid risk
Regulatory compliance
Regulatory requirements affecting data integrity
Reliable team management
Report creation
Risk assessments
Router switches
Ruby
Safenet
Syslog-NG
System security
System vulnerabilities
Technical and non-technical problem-solving
Technical direction to other peer staff members
Technical Security Standards Compliance Specific
Techniques and procedures (TTPs) used by threat actors against endpoints
Technology and leadership partners
Thales
The mechanics OS exploits preventive and detective controls
Threat and vulnerability management (TVM) Systems
Threat detection
Tooling integrations to support Agile
Tools used to execute a world class offensive Security program
Tools used to execute a world class Perimeter Network Security program
Train new staff on the security team
Transmission Control Protocol/Internet Protocol (TCP/IP)
UEBA and related tools
Understand security risks and controls
Unix
Various methods of controlling information security problems
Verbal communication
Visionary
Voltage
Vormetric
Vulnerability scanning tools
Web Application Firewall (WAF)
Windows servers and workstations

Disclaimer : This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.

Security Engineering - Analyst

Job Description

No Referrers Available