Security Engineer

Overview

• develop, implement and maintain solutions that support the safeguarding of the bank's systems and sensitive information
• provision of subject matter expertise on security systems and engineering patterns
• development and implementation of protocols, algorithms, and software applications to protect sensitive data and systems
• management and protection of secrets, ensuring that they are securely generated, stored, and used
• execution of audits to monitor, identify and assess vulnerabilities in the bank's infrastructure/software and support the response to potential security breaches
• collaboration across the bank, including developers and security teams, to ensure that cryptographic solutions align with business objectives, security policies and regulatory requirements
• development/implementation and maintenance of Identity and Access Management solutions and systems

• experience with the software security landscape: CVEs, CWEs, common software vulnerability types SAST, SCA, and DAST, including the strengths and weaknesses of each
• at least one programming language (e.g. Java, Go)
• at least one major cloud provider (e.g. AWS, GCP, Azure)
• REST API design
• HTTP Authentication
• Linux at the terminal, including scripting and automation (e.g. shell, Python)