Security Engineer II - Threat and Vulnerability

Security Engineer II - Threat and Vulnerability

Apply for the Security Engineer II - Threat and Vulnerability role at Stifel Financial Corp.

Stifel strives for a culture that puts its clients and associates first: a culture where everyone belongs, everyone is welcome, and everyone contributes to the success of our clients, their careers, and the firm as a whole.

Let’s talk about how you can find your place here at Stifel, where success meets success.

Under general supervision, the IT Security Threat Engineer II is a front‑line member of the Threat and Vulnerability Management team with responsibility for detecting potential risks to the Stifel network and assets. The role involves developing security solutions and maintaining, documenting, and managing the lifecycle of those solutions using multiple complex tools to analyze and detect threats and vulnerabilities to Stifel assets.

• Research emerging threats and vulnerabilities to aid in the identification of incidents.
• Monitor threat intelligence feeds to identify a range of threats, including indicators of compromise and advanced persistent threats (APTs).
• Assist in identifying potential threats’ tactics, techniques, and procedures (TTPs) through the MITRE ATT&CK or similar frameworks.
• Research and understand vulnerabilities, including different ways to exploit them.
• Assess threats and vulnerabilities and the level of risk to the firm.
• Identify deviations from acceptable configurations and enterprise or local security policy.
• Interface with network and server administrators, desktop support, developers, and business stakeholders on security vulnerabilities and threats.
• Track remediation efforts for identified vulnerabilities through agreed‑upon completion dates and plans, ensuring compliance with associated corrective action time frames.
• Work collaboratively with all Stifel departments to ensure local practices are consistent with corporate information‑security policies and standards.

• Advanced understanding of a security control environment (access control, logging, authentication, encryption, integrity, etc.).
• Experience coordinating corporate‑wide initiatives for obtaining security‑related assurances.
• Familiarity with federal and state legal and regulatory requirements related to information security.
• Understanding of advanced principles of security risk management and defense‑in‑depth practices.
• Ability to combine pieces of information to form general rules or conclusions.
• Use logic and reasoning to identify strengths and weaknesses of alternative solutions or approaches.
• Consider the relative costs and benefits of potential actions to choose the most appropriate one.
• Analyze needs and product requirements to create a design.

• Minimum required:
  Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Management Information Systems, or a related field.
• Minimum required: 2–4 years’ experience in an information technology role, including experience with security‑related systems and solutions.

• None required.

• Proficient in Vulnerability Management and SIEM solutions.
• Strong understanding of analyzing and incorporating threat intelligence.
• Experience with ticketing systems.
• Experience with office productivity, reporting, and technical documentation software.
• Exposure to systems monitoring tools and logging tools.
• Knowledge of multiple versions of Microsoft Windows and web browsers.
• Proficient in Microsoft Office suite (Excel, Word, PowerPoint, Outlook).

Stifel is more than 130 years old and still thinks like a start‑up. We are a global wealth management and investment banking firm dedicated to safeguarding our clients’ money as if it were our own. Our success is tied to our commitment to helping families, companies, and municipalities find their own success.

Headquartered in St. Louis, we have offices in New York, San Francisco, Baltimore, London, Frankfurt, Toronto, and over 400 other locations. Stifel employs approximately 9,000 professionals across a variety of functions. We offer an entrepreneurial environment and a comprehensive benefits package including health, dental, vision care, 401(k), wellness initiatives, life insurance, and paid time off.

Stifel is an Equal Opportunity Employer.

• Seniority Level: Mid‑Senior level
• Employment Type:
  
  Full‑time
• Job Function:
  Information Technology