Cyber Security Engineer

Regions Bank•Nashville, TN

21h•$89,330 - $122,940•Onsite

About The Position

At Regions, the Cyber Security Engineer supports applicable services for cloud applications, infrastructure, platform security, and related technologies within the Cyber Security organization. The position designs, implements, and supports cyber security technology solutions; provides technical administration and operational support; and contributes to research, technology selection, implementation, and process improvement. The engineer may participate in security incident response and post-event reviews, support subject-matter experts and business teams, and contribute to security governance, metrics, controls, and operational documentation. The role participates in an on-call rotation and may provide guidance to junior engineers. The position is intended to be onsite, now or in the near future. Associates will have regular work hours, including full days in the office three or more days a week. The manager sets the schedule and in-office expectations. Available locations listed for the role are Birmingham, Alabama; Atlanta, Georgia; Nashville, Tennessee; or Charlotte, North Carolina. The location details also list Riverchase Operations Center in Hoover, Alabama. Relocation assistance is not provided. Applicants must currently be authorized to work in the United States; Regions will not sponsor work visas for this position. The role may be filled at a higher level depending on qualifications and relevant experience. It is full time and exempt from timekeeping requirements under the Fair Labor Standards Act, so it is not eligible for overtime pay.

Requirements

High school diploma or GED and six years of related post-secondary education and/or experience in Information Security and/or Information Technology.
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance.
Ability to prioritize conflicting demands.
Knowledge of common web technologies, cloud technologies, and enterprise and network architecture.
Knowledge of defense in depth, trust levels, privileges, and permissions.
Knowledge of modern security tools and controls.
Problem-solving skills to offer sound solutions to issues.
Strong verbal and written communication and organizational skills.
Strong analytical and evaluative thinking capability.
Must currently be authorized to work in the United States on a full-time basis.

Nice To Haves

Bachelor’s degree in Information Technology, Information Security, Information Systems Management, Computer Science, Engineering, or a related field.
Applicable technology and/or security certifications, such as CISSP, CompTIA Security+, CCNA, or MCSA.
Experience supporting more than one operating system type in an enterprise environment, such as RedHat Linux, AIX, Solaris, or Oracle Linux.
Advanced understanding of IAM concepts, especially Least Privilege.
Experience with at least one UNIX Identity Management solution, such as BoKS, CyberArk, Delinea, or VAS.
Familiarity with enterprise tools such as SailPoint and Okta, or similar.
Advanced understanding of UNIX permissions, file ownership, PAM, and user/group management.
Understanding of SUDO policies and privilege delegation.
Knowledge of user provisioning and deprovisioning processes.
Shell scripting experience; Python experience is a plus.
Familiarity with Role Based Access Control.
Understanding of cloud IAM concepts, such as AWS IAM and Azure AD.

Responsibilities

Design, implement, and support relevant cyber security technology solutions.
Provide technical administration, including troubleshooting, break-fix operations, patching, and other day-to-day application activities.
Stay current with industry trends and investigate organizational objectives and needs.
Maintain operational documentation and reports, and assist with reviews to support monthly trend analysis and project components.
Assist with research, proof-of-concept work, selection, and implementation of technology solutions, including analysis of pros and cons and build-versus-buy options.
Explore new technologies, solutions, and methods to improve business processes, efficiency, effectiveness, and value delivered to customers.
Participate as needed in security incident response and post-event reviews.
Support subject-matter experts in designing, implementing, and maintaining cyber security solutions for business areas, project teams, and vendors.
Participate in examining technology vision, opportunities, and challenges related to security standards and their impact within the Cyber Security organization.
Support metrics, controls, and other governance administration related to cyber security technology.
Participate in an on-call rotation to support relevant cyber security technologies.
Adhere to operational processes, standards, and procedures.
Ensure compliance with risk management programs, rules, regulations, and cybersecurity practices; identify and support process improvements; and apply disciplined change management practices.
May offer advice and guidance to junior engineers.