Cyber Security Engineer

Regions Bank•Hoover, AL

10h•Onsite

About The Position

At Regions, the Cyber Security Engineer supports services for cloud applications, infrastructure, platform security, and related technologies within the Cyber Security organization. The role designs, implements, and supports cybersecurity technology solutions; provides technical administration and day-to-day operational support; and helps research, evaluate, and implement technologies that improve business processes and customer value. The engineer may participate in security incident response and post-event reviews, supports security subject-matter experts and project teams, and contributes to metrics, controls, governance, operational documentation, and process improvement. The position participates in an on-call rotation and may provide advice and guidance to junior engineers. It is intended to be onsite now or in the near future, with regular work hours and full days in the office three or more days per week. The manager sets the schedule and in-office expectations. Available locations are Birmingham, Alabama; Atlanta, Georgia; Nashville, Tennessee; or Charlotte, North Carolina. The listed location details identify the Riverchase Operations Center in Hoover, Alabama. Relocation assistance and work visa sponsorship are not provided. The position is exempt from timekeeping under the Fair Labor Standards Act and is not eligible for overtime. Pay range target starts at $89,329.90, with a median of $122,940.00; the role is not incentive eligible.

Requirements

High school diploma or GED.
Six years of related post-secondary education and/or experience in Information Security and/or Information Technology.
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
Ability to prioritize conflicting demands.
Knowledge of common web and cloud technologies and enterprise and network architecture.
Knowledge of defense in depth, trust levels, privileges, and permissions.
Knowledge of modern security tools and controls.
Problem-solving skills and ability to offer sound solutions to issues.
Strong verbal and written communication and organizational skills.
Strong analytical and evaluative thinking capability.
Applicants must currently be authorized to work in the United States on a full-time basis.

Nice To Haves

Bachelor’s degree in Information Technology, Information Security, Information Systems Management, Computer Science, Engineering, or a related field.
Applicable technology and/or security certifications, such as CISSP, CompTIA Security+, CCNA, or MCSA.
Experience supporting more than one operating system type in an enterprise environment, such as RedHat Linux, AIX, Solaris, or Oracle Linux.
Advanced understanding of IAM concepts, especially Least Privilege.
Experience with at least one UNIX identity management solution, such as BoKS, CyberArk, Delinea, or VAS.
Familiarity with enterprise tools such as SailPoint and Okta, or similar tools.
Advanced understanding of UNIX permissions, file ownership, PAM, and user/group management.
Understanding of SUDO policies and privilege delegation.
Knowledge of user provisioning and deprovisioning processes.
Shell scripting experience; Python experience is a plus.
Familiarity with Role Based Access Control.
Understanding of Cloud IAM concepts, including AWS IAM and Azure AD.

Responsibilities

Design, implement, and support relevant cybersecurity technology solutions.
Provide technical administration, including troubleshooting, break-fix operations, patching, and other day-to-day application activities.
Stay current with industry trends and investigate organizational objectives and needs.
Maintain operational documentation and reports and assist with reviews to support monthly trend analysis and project components.
Assist with research, proof-of-concept work, selection, and implementation of technology solutions, including analysis of pros and cons and build-versus-buy options.
Explore new technologies, solutions, and methods to improve business processes, efficiency, effectiveness, and customer value.
Participate as needed in security incident response and post-event reviews.
Support subject-matter experts in designing, implementing, and maintaining cybersecurity solutions for business areas, project teams, and vendors.
Participate in examining technology vision, opportunities, security standards, challenges, and technology impacts within the Cyber Security organization.
Support cybersecurity technology metrics, controls, and governance administration.
Participate in an on-call rotation to support relevant cybersecurity technologies.
Follow operational processes, standards, and procedures.
Ensure compliance with risk management programs, rules, regulations, and cybersecurity practices; identify opportunities for and support process improvements; and apply disciplined change-management practices.
May offer advice and guidance to junior engineers.