Principal Cyber Security Engineer

This is a fully remote position, open to applicants in Arizona, +3 more states.

📋 Description

• Oversee day-to-day engineering, operations, analysis, management, and administration of tools, systems, or processes that protect the Bank's information assets and technology infrastructure.

• Evaluate organizational networks, applications, or systems to identify potential vulnerabilities.

• Develop and implement technical solutions to enhance security.

• Act as a technical resource for management, associates, and business teams.

• Guide and mentor less experienced associates within the work group.

• Investigate and implement process or system enhancements that bolster the Bank’s information security.

• Conduct security assessments, pinpoint security gaps, and create and execute risk mitigation strategies.

• Ensure adherence to required standards, regulations, or best practices.

• Manage security projects and associated teams as designated.

• Stay informed about industry practices, technology advancements, and emerging threats.

• Provide management with advice on security protocols and incident responses.

• Mentor and train team members.

• Lead the investigation and resolution of security incidents.

• Prepare, review, and communicate incident reports to management.

• Establish monitoring and alerting processes for prompt event detection.

• Develop playbooks or documentation that address recurring issues.

• Identify and assess potential threats or vulnerabilities in networks, applications, or systems.

• Aggregate data from both external and internal sources to produce actionable intelligence.

• Support senior leadership in formulating security policies, standards, and strategies.

• Drive security strategy implementation across the Bank.

⛳️ Requirements

• Bachelor's Degree with 8 years of experience.

• OR High School Diploma or GED/Equivalent with 12 years of experience in Systems Engineering, Network, or Information Security.

• Familiarity with relevant services, products, technologies, and monitoring or alerting tools.

• Proficiency in coding and scripting languages such as Python, Perl, and PowerShell.

• Understanding of cryptographic implementations.

• Knowledge of risk management standards, procedures, and data security practices.

• Ability to effectively communicate risks, threats, and vulnerabilities identified during assessments.

• Willingness to provide after-hours operational support on a rotational basis, with minimal travel required.

• Strong, practical knowledge of federated authentication protocols, including SAML and OIDC.

• Hands-on experience with at least one enterprise IAM/SSO platform (e.g., Okta, Ping).

• Proven expertise in scripting and automation using Python and PowerShell.

• Demonstrated experience in designing and implementing Infrastructure as Code (e.g., Terraform).

• Experience in designing and leading the automation of identity and security processes/workflows (e.g., Okta Workflows).

• Working knowledge of step-up/adaptive authentication design.

• Experience with identity threat protection platforms (e.g., Silverfort).

• Familiarity with passwordless technologies (e.g., Windows Hello, Okta FastPass).

• Experience with multiple IAM platforms (e.g., both Okta and Ping).

🏝️ Benefits

• Competitive, thoughtfully designed, and high-quality benefits program.

• Benefits information is available at https://jobs.firstcitizens.com/benefits.