Configuration Assurance Engineer II

First Citizens Bank • Raleigh, NC

12h • $105,000 - $160,000 • Remote

About The Position

The Configuration Assurance Engineer II position is an individual contributor role on the Enterprise Security Architecture team, aligned to the Bank’s Secure Configuration Management program. The Engineer will be responsible for ensuring the Bank’s core technologies are consistently and securely configured; and that drift from these configurations is identified, tracked, and remediated in a timely manner.
The ideal candidate will possess a deep technical understanding of fundamental security principles, but also commonly used operating systems, database platforms, and/or cloud service providers. In addition, the candidate will employ a proactive, preventative, and collaborative mindset to partner with technology teams, converge on “the right” configurations, and ensure risk-oriented action.
This is a remote role that may be hired in several markets across the United States.
Remote with ability to travel to Raleigh, North Carolina, Phoenix, Arizona or Morristown, New Jersey, on an as needed basis.

Requirements

• Bachelors Degree and 4 years of experience in Cyber Security or Technology engineering OR High School Diploma or GED and 8 years of experience in Cyber Security or Technology engineering.
• Strong knowledge of core OS and DB technology platforms – demonstrable experience in hardening said technologies in an Enterprise environment.
• Demonstrated ability to pressure-test disabled or deviated configuration controls, assess security impact, and evaluate compensating controls
• Hands-on experience administering and tuning automated compliance scanning tools, including configuration policy setup, scan validation, and results analysis.
• Experience validating secure configuration remediation through technical evidence review.
• Working knowledge of scripting tools to support validation, troubleshooting, and automation.
• Excellent communication and documentation skills.
• Ability to work collaboratively with technical and non-technical stakeholders.

Nice To Haves

• 6+ years of experience supporting secure configuration management, system hardening, or security control validation.
• Experience working in the banking or financial services industry is a plus.
• Certifications such as Security+, SSCP, CISA, CISM, CISSP, CRISC.
• Knowledge of issue tracking and reporting tools like Jira or Confluence.

Responsibilities

• Serve as a technical subject matter expert for secure configuration management across enterprise platforms, including servers, endpoints, cloud, and supporting infrastructure.
• In partnership with technology owners, define secure configuration baselines in alignment with Industry best practices, the threat landscape, operational realities/constraints, and the Bank’s risk appetite.
• When tailoring is thought necessary, tactfully challenge the need through technical risk assessment, evaluation of alternative and/or compensating controls, and providing recommendation(s).
• Administer, configure, and tune automated compliance tools to validate secure configuration controls, ensure accurate coverage, and reduce false positives.
• Configure and maintain secure configuration policies within automated compliance tools, including mapping controls to internal standards and industry benchmarks.
• Identify, assess, and remediate realized or looming systemic issues across the span of the program (e.g., fidelity of reporting; false positives) to include the open-exchange of forwards-looking perspectives on tactical and strategic opportunities.

Benefits

• Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees