Information Security Engineer

Benefits

• Immediate vesting eligibility with company-matched 401K
• Competitive paid time off benefits
• Generous number of paid holidays
• Employer paid group disability and group life insurance, plus an AD&D policy
• Incentives for meeting Health & Wellness goals
• Employee-only benefits on checking accounts and loans
• Opportunities for career advancement, and more!

Position: Information Security Engineer

Location: 330 Rush Alley, Suite 500, Columbus, OH

Job : 1038

# of Openings: 1

The Information Security Engineer is responsible for the design, implementation, and operational maintenance of technical security controls that protect the financial institution’s information systems, infrastructure, and data. This role focuses on preventive, detective, and responsive security capabilities
, ensuring systems are resilient, compliant, and aligned with regulatory expectations applicable to financial institutions. The Information Security Engineer partners closely with IT Operations, Infrastructure, Cloud, and Application teams to embed security into day‑to‑day operations while maintaining clear accountability and audit readiness.

• Configure, tune, and support security tools including (but not limited to):
  • Endpoint Detection and Response (EDR/XDR)
  • Network security controls (firewalls, segmentation, IDS/IPS)
  • Identity and Access Management (IAM), MFA, and privileged access controls
  • Vulnerability management and configuration hardening tools
• Ensure secure baseline configurations for operating systems, infrastructure, and cloud services.
• Monitor security alerts, investigate suspicious activity, and support incident containment and remediation efforts.

• Perform regular vulnerability scanning and analysis across infrastructure and applications.
• Work with IT teams to prioritize remediation based on risk, exposure, and business impact.
• Track remediation progress and validate corrective actions.
• Assist with threat modeling and identification of emerging risks relevant to financial services.
• Participate in security incident response activities, including detection, investigation, containment, and recovery.
• Support development and testing of incident response playbooks (e.g., ransomware, privileged account compromise, third‑party incidents).
• Assist with forensic data collection and evidence preservation as required.
• Contribute to tabletop exercises and after‑action reviews.

• Support security control evidence collection for audits, exams, and risk assessments.
• Assist in maintaining alignment with applicable regulatory and industry expectations (e.g., NCUA, GLBA, NIST).
• Document technical controls, configurations, and operational procedures in an audit‑ready manner.
• Provide technical input into risk assessments, vendor reviews, and exception requests.
• Serve as a security engineering subject‑matter expert for IT projects and infrastructure changes.
• Review system designs and architecture for security risks and control gaps.
• Partner with IT Operations to balance security, availability, and operational efficiency.
• Provide guidance on secure implementation without acting as a blocking function.

• Bachelor’s degree in Information Security, Computer Science, Information Technology, or equivalent experience.
• 3–7 years of experience in information security engineering, infrastructure security, or related roles.
• Hands‑on experience securing:
  • Windows and/or Linux server environments
  • Network infrastructure and firewalls
  • Identity systems and privileged access
• Strong understanding of cybersecurity principles including least privilege, defense‑in‑depth, and zero trust concepts.
• Ability to document technical controls clearly for audit and executive audiences.

• Experience in a financial institution or highly regulated environment
  .
• Familiarity with NIST Cybersecurity Framework, CIS Controls, or similar standards.
• Experience with cloud security (Azure, AWS, or equivalent).
• Security certifications such as CISSP, CISM, GIAC, Security+, or vendor‑specific credentials.
• Experience supporting…