Information Security Specialist

Company
Federal Reserve Bank of Kansas City When you join the Federal Reserve-the nation's central bank-you'll play a key role, collaborating with leading tech professionals to strengthen and protect our economic, financial and payments systems. We invest in contemporary and emerging technology each year to support the Federal Reserve and our economy, and we're building a dynamic and diverse team for our future.

Important Information

• Open to US citizens, Green Card holders or Permanent Residents with at least 3 years of residency, with the intent to become a US citizen.

• No sponsorship is available. Candidates must have valid work authorization, without an end date, to be considered.

• This position requires working on-site, in Kansas City, Denver, Oklahoma City, or Omaha, with 5 days per month remote work flexibility.

• This position is not eligible to be remote and relocation assistance is not available.

We are seeking cybersecurity professionals to join our Information Security team as a security specialist focused on operating our Dev Sec Ops  program according to standards and policies.

This will be done through close partnership with peers in FRB Kansas City and other Reserve Banks across the System. It will also require healthy relationship building and tight integration with development teams. Additionally, you'll partner with business areas, vendors, and our diverse network of professionals to identify, implement, and support security across the organization.

Candidates with strong understanding and experience in cloud environment deployments, information security, data management, low-code and no-code solutions, Dev Sec Ops , and artificial intelligence will be ideal.

Key Activities

• Interpret and evaluate policies in order to mature and implement the Dev Sec Ops  program.

• Assess maturity of development teams' Dev Sec Ops  practices against an existing framework.

• Proactively advocate for and drive enhancements into the program.

• Identify gaps/opportunities for enhancements to workflows and processes for enhancing the software development lifecycle (SDLC).

• Implement and consults on secure continuous integration and continuous delivery (CI/CD) pipelines, evaluating code and/or applications, or creating code to facilitate the process.

• Monitors information security policy compliance using security tooling.

• Evaluate and implement security products and/or processes to enhance productivity and effectiveness for various platforms and initiatives.

• Provide technical expertise and support to internal teams on security-related matters.

• Collaborate with cross-functional teams to integrate security measures into existing software applications and infrastructure.

• Stay current with emerging technologies, industry trends, and best practices in cybersecurity to enhance our security posture.

• Support leadership decision making through timely analysis and written communications.

Qualifications

• Typically requires 3-6 years of relevant experience.

• Bachelor's Degree in Technology, Engineering, Computer Science, Information Systems, Cybersecurity or other related field or equivalent work experience.

• Strong competence in cloud technologies such as AWS, Azure, and other platforms.

• Expert understanding of Dev Sec Ops  practices, frameworks, and tools.

• Expertise with tool integration for the Dev Ops pipeline such as Git.

• Combines and organizes information into meaningful patterns; identifies underlying relationships, causes and effects; and combines pieces of information to form conclusions or general rules.

• Rapidly acquires new knowledge and learns new skills, and practices agile methodologies to planning and accomplishing work.

• Conveys complex and technical issues to diverse audiences.

• Demonstrated competencies with artificial intelligence are beneficial.

• Working knowledge of Terraform, Ansible, Cloud Formations, AWS Config, AWS Inspector, Guard Duty and others.

• Strong knowledge of software development languages, tools and techniques such as Python, JSON, YAML, and Java

• Technical expertise in security tools and knowledge of security practices and procedures.

• A learning mindset, proactiveness, collaboration, and strong attention to detail.

Additional Information

How We Work (HWW):

• On-site: 5 days per month remote work flexibility

• Locations:
  Kansas City, Denver, Oklahoma City, Omaha

• Remote Eligible:
  No

• Relocation Assistance:
  No

Salary:

• $79,100 - $111,500 / Experienced Level

• $98,600 - $139,000 / Senior Level

• Final offers are determined by factors including the candidate's qualifications, internal alignment considerations, district assignment, and geographic location.

Screening: US citizens, permanent residents with the intent to become a US citizen with at least three or more years of United States residency from the date of legal entry to the United States is required for this position.

This position has additional screening requirements due to the information accessed while performing the job. These additional screenings would be initiated at the time of offer acceptance and…