Information Security Engineer - Pittsfield, MA

Officer:
Officer

Division:
Technology

Department:
Information Security

Reports to:

Principal Information Security Engineer

Status:
Exempt/ Officer

Grade: 10

Salary Range: $55,588 - $102,474

Actual compensation within the pay range will be determined based on factors including, but not limited to, skills, prior relevant experience, and specific work location.

Location:

MA, CT, NY, VT, RI

Under the direction of the Principal Information Security Engineer, supports the Company's Information Security Program by engineering, maintaining, and improving security technologies, identity and access controls, monitoring capabilities, and defensive security processes. The Information Security Engineer partners with Information Technology, Identity and Access Management, Risk, Compliance, application owners, business units, and third-party service providers to protect Company systems, data, customers, and employees.

• Administer, maintain, and enhance enterprise information security technologies, including endpoint security, email security, data loss prevention, application security, network security, identity protection, cloud security, logging, monitoring, and security related platforms. Lead the design, implementation, and continuous improvement of enterprise security architecture and engineering programs.
• Maintain security standards across cloud, network, endpoints, identity, application, and data security domains.
• Partner with Identity and Access Management to improve access control, privileged access management, authentication, conditional access, role-based access, and user lifecycle security controls.
• Assists with evaluating security risks associated with AI platforms, agents, models, APIs, third-party AI vendors, and cloud AI services. Assists with developing controls for data protection, AI monitoring, identity management, and secure AI deployment.
• Develop and maintain security standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned security platforms and processes.
• Assist with security assessments for new systems, technology changes, vendor solutions, mergers, integrations, branch initiatives, and enterprise projects to ensure appropriate security requirements are identified and implemented.
• Support audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, and maintaining documentation that demonstrates control effectiveness.
• Identify opportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection capabilities, and mature the Company's overall security posture.
• Collaborate with IT Operations, Infrastructure, Service Desk, Application Support, Risk Management, Internal Audit, Compliance, and business stakeholders to resolve security issues and support secure business operations.
• Participate in security incident response, change management, disaster recovery, business continuity, and other operational activities as required.
• Ensure compliance with all banking laws, rules, regulations, and prescribed policies/practices/procedures necessary to reduce risk and uphold ethical standards related to and required by one's duties.

• Bachelor's degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred.
• Equivalent combination of education, technical certifications, and relevant experience may be considered.
• Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred.

• 5+ years of experience in information security, cybersecurity…