Engineer, Technology Risk & Cybersecurity

Job Description

Engineer, Technology Risk & CybersecurityMerrick Bank, 10705 South Jordan Gateway, South Jordan, Utah, United States of America Req #5964 Thursday, April 7, 2022 Merrick Bank employees share in our mission to delight our customers and empower underserved consumers to achieve their credit goals. In return, we delight our associates; ensuring they are noticed, heard, appreciated and understand the importance of their role(s). For over 20 years, our Guiding Principles of; doing the right thing, putting the customer first, and Earn, Learn, Have Fun (aka E.L.F.), have defined who we are as an Employer of Choice. Give Yourself Credit, Work at Merrick! The Application Security Engineer II operates, monitors, and improves information security processes and systems that protect the Bank?s data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism. This role focuses on application and development security, application logging and monitoring capabilities, and cloud infrastructure/platform security.Essential Functions:Key Application and Development Security responsibilities include: * Define, participate in, and test reasonable application and development security practices. * Involvement with each of the development project teams throughout the software request & delivery process. * Regular ongoing testing and evaluation of security controls and risk for hosted and key business systems. * Develop and ensure effectiveness of logging and monitoring for security incident response. * Assist with defining appropriate cloud infrastructure security controls, and providing effective control assurance. Each Security Engineer is also responsible to cross-train and be familiar with other security functions as assigned: * Security Monitoring & Response - Detect and respond to security events by identifying, reporting, mitigating, and recovering from security incidents. * Security Control Engineering and Operations - Enable and protect business services with appropriate access, endpoint, network, data storage, and data loss prevention controls, including vulnerability and controls testing. * Security Risk & Program Management - Assess and advise technology and business groups by identifying, prioritizing, managing, and reporting security risk. * Performs other duties as assigned. Compliance with Laws & Regulations: * Responsible for complying with all of the Bank?s internal control policies and procedures. * Responsible for understanding and complying with all laws and regulations to which the Bank is subject. * Responsible for communicating problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.Education and Experience:* Bachelors? degree in computer or cybersecurity-related studies required, or four (4) years of equivalent broad experience accepted in lieu of required degree. * Four (4) years of work experience in application development and/or secure SDLC practices * GIAC, ISC2, or other recognized certifications are also desirable. * Experience as a security or IT system administrator a plus, including day-to-day operations, troubleshooting, access administration, updating/patching, etc. * Familiarity highly-regulated industries, and specifically the banking industry (including FDIC regulations) is desirableSummary of Qualifications:* Outstanding troubleshooting and problem-solving skills. * Demonstrated skills in application development and secure systems development lifecycle. * Demonstrated skills with security concepts, defense-in-depth strategies, security tools, and protocols. * ?White-hat? mentality, with a healthy sense of paranoia (security awareness and risk). * Positive, inquisitive, can-do attitude. * Self-starter, requires minimal oversight to perform as expected, work well independently and as part of a team. * Comfortably perform well under pressure, deliver to commitments on tight deadlines. * Meticulous attention to detail. * Passion for cybersecurity and technology trends, news, and hacking techniques. Our Valued Employees are provided generous benefits, including: * Competitive Pay * Benefits Package -Medical, Dental and Vision (plus much more) * 401(k) Plan with Company Match * Short & Long Term Disability * Group Life and AD&D Insurance * Paid Vacation, Holidays, and Personal Days * Employee Events, including Employee Appreciation Day, Holiday Party, etc. * Tuition Reimbursement Program Candidates must have unrestricted authority to work in the United States without sponsorship. Merrick Bank is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristic. Merrick Bank will do a thorough background check for all hires. The EEOC Law poster is available here: http://www1.eeoc.gov/employers/poster.cfm Please go to our website www.merrickbank.com to apply and learn more about our company.Other details* Job Family Information Security * Job Function All Other Salaried * Pay Type Salary

Keyskills :