Information Security Engineer

FIRSTRUST BANK Recognizes the leader in you

As one of the region's foremost community banking institutions, we take pride in fostering leadership.

As a Firstrust employee, your growth is our growth. For you, that means great benefits, performance-based pay, a meaningful role, and resources to help your success. For us, that means employees who offer exemplary customer service with a commitment to our values - honesty, integrity and accountability.

* Hybrid Position*

We are seeking a highly skilled and motivated Information Security Engineer to join our IT Security team. In this role, you will be a key defender of our infrastructure, bridging the gap between advanced threat defense, cloud security, and corporate compliance.

The ideal candidate possesses a deep technical understanding of modern cloud architectures (SASE/CASB), a proactive mindset for threat hunting, and the diligence required to manage Business Continuity/Disaster Recovery (BC/DR) operations and data governance via Microsoft Purview.

• Design, deploy, and maintain Next-Generation Firewall (NGFW) policies and rules ensuring least-privilege access.
• Manage and optimize our Secure Access Service Edge (SASE) architecture to support a secure remote/hybrid workforce.
• Implement and monitor Cloud Access Security Broker (CASB) solutions to gain visibility into shadow IT, enforce data compliance, and prevent data leakage across SaaS applications.
• Maintain firewall change management processes, including peer review, staging/testing, and post-change validation.

• Proactively conduct threat hunting campaigns across network, endpoint, and cloud logs to identify anomalous behavior and latent threats that bypass traditional security controls.
• Analyze security telemetry (SIEM/XDR) to reconstruct attack vectors and develop custom detection rules.
• Act as a core member of the Incident Response team, including containment, eradication, and post-incident analysis.
• Maintain current awareness of emerging threat actor groups, CVEs, and exploitation trends relevant to our industry and technology stack.
• Remain available outside of standard business hours to respond to escalated, high-priority security events as needed.

• Collaborate with business stakeholders to develop, maintain, and update Business Continuity and Disaster Recovery plans.
• Coordinate and lead regular BC/DR tabletop exercises and technical disaster recovery drills (failovers, backups restoration).
• Ensure defined RPOs and RTOs are achievable, tested, and aligned with regulatory requirements - flagging gaps to leadership with clear remediation paths.

• Administer and optimize the Microsoft Purview compliance suite with hands-on ownership of:
  Information Protection (sensitivity labels, auto-labeling policies), Data Loss Prevention (DLP) policies across M365 and endpoint, Compliance Manager (assessment tracking, control mapping), and Advanced eDiscovery
  .
• Design and manage end-to-end eDiscovery workflows: creating review sets, applying legal holds, running targeted content searches, managing custodian communications, and producing defensible data exports in coordination with legal counsel.
• Develop and refine DLP policies to reduce false positives, improve policy coverage, and generate actionable alerts - working with business units to balance security with operational productivity.
• Monitor Purview audit logs and compliance dashboards, escalating anomalies and producing regular reports for security leadership and legal/compliance stakeholders.

• Assists in the development of new business for Firstrust. Is alert to expressed customer/prospect needs to suggest appropriate services. Directs customers to appropriate person to establish business relationships.

• Other duties as assigned.

• Prolonged periods sitting at a desk and working on a computer.
• Regularly required to drive a motor vehicle, occasional air travel, attending meetings at various venues, including but not limited to customers' offices and/or properties, restaurants and other meeting locations, and ascend/descend stairs and or ladders occasionally to perform inspections.
• The employee may be required to lift files/materials up to 20 pounds to take to various locations.
• The incumbent will be expected to operate a…