Sr. Cybersecurity Engineer (Hybrid)

PRIMARY PURPOSE: The Senior Cybersecurity Engineer’s primary purpose is to safeguard the organization’s technology systems and member data. This will be done through leading the implementation and maintenance of security controls and being a member of the Wings Security Incident Response Team (SIRT).

ESSENTIAL FUNCTIONS include the following. Other duties may be assigned.

• Lead the design of security controls in on-prem and cloud environments for data protection, endpoint security, cloud security, identity and access management, incident management, development environment, and more.
• Lead the implementation, maintenance, and maturation of security controls in on-prem and cloud environments for data protection, endpoint security, cloud security, identity and access management, incident management, development environment, and more.
• Point of escalation (Tier 2) for Wings SIRT.
• Develop and maintain knowledge base and procedural documentation.
• Collaborate with Wings SIRT to improve processes, procedures, and training for investigations to train on proper techniques.
• Actively participate in planning sessions and advocate for the integration of cyber risk mitigation strategies in the development and implementation of new technology services.
• Acts as a key collaborative resource with business, leadership, and technology teams for routine issues and project-related requirements.
• Subject Matter Expert for supported security technologies/controls.
• Research and explore emerging security technologies and determine their appropriate use within the organizations.
• Assist with leading the development and continuous improvement of the following cybersecurity initiatives: Configuration & Vulnerability Management, Cloud Security, Third Party Risk Management, Security Policies, and Cybersecurity Governance & Compliance.
• On-call rotation.

QUALIFICATIONS:

• Bachelor’s degree in Cybersecurity, Information Systems, or equivalent.
• Eight (8) or more years of relevant experience.
• Experience working in financial services industry.
• Industry certification highly desirable (ex: ISSEP, CDPSE, GCED, CASP+, or similar).
• Strong understanding of standards, frameworks, and financial services regulations (including GLBA, NCUA, CFPB, PCI, NIST CSF, etc.) and internal audit processes.
• Ability to work with limited supervision, manage time, prioritize, and multitask.
• Ability to function efficiently and effectively under deadlines and stress while maintaining a professional and mature profile.
• Ability to work extremely well with internal and external customers using excellent written and oral communication skills.
• Continuously Identifying areas in the technology stack that can be improved and optimized.
• Provide Mentorship to individuals and teams within the organization.
• Respond to all on-call requests within defined SLA.
• Manage and maintain vendor relationships with all levels of support.
• Bondable

Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.