Cyber Security Engineer

Regions Bank•Hoover, AL

12h•Hybrid

About The Position

At Regions, the Cyber Security Engineer supports applicable services for cloud applications, infrastructure, platform security, and related technologies within the Cyber Security organization. This position is exempt from timekeeping requirements under the Fair Labor Standards Act and is not eligible for overtime pay. This position may be filled at a higher level depending on the candidate’s qualifications and relevant experience.

Requirements

High School Diploma or GED and six (6) years of related post-secondary education and/or experience in Information Security and/or Information Technology
Ability to interpret and ensure compliance with applicable rules, regulations, and industry guidance
Ability to prioritize conflicting demands
Knowledge of common web technologies, cloud technologies, and enterprise and network architecture
Knowledge of defense in depth, trust levels, privileges, and permissions
Knowledge of modern security tools and controls
Problem-solving skills to offer sound solutions to issues
Strong verbal, written communication, and organizational skills
Strong analytical and evaluative thinking capability

Nice To Haves

Experience supporting more than one OS type (RedHat Linux, AIX, Solaris, Oracle Linux, etc.) in an enterprise environment
Advanced understanding of IAM concepts, especially Least Privilege
Experience with at least one UNIX Identity Management solutions (BoKS, CyberArk, Delinea, VAS, etc.) preferred
Familiarity with enterprise tools such as SailPoint and Okta, or similar
Advanced understanding of UNIX permissions, file ownership, PAM, user/group management
Understanding of SUDO policies and privilege delegation
User provisioning/deprovisioning processes
Shell scripting experience (Python experience a plus)
Familiarity with Role Based Access Control
Understanding of Cloud IAM concepts (AWS IAM, Azure AD)

Responsibilities

Designs, implements, and supports relevant cyber security technology solutions
Provides technical administration to include troubleshooting support, break-fix operations, patching, and other day-to-day activities for relevant applications
Stays abreast of industry trends and investigates organizational objectives and needs
Maintains, and may assist with reviewing, operational documentation and reports to support monthly trend analysis as well as project components
Assists with the research, proof-of-concept, selection, and implementation of technology solutions, including detailed analysis of pros and cons and build vs buy options
Explores implementation of new technologies, solutions, and methods to improve business processes, efficiency, effectiveness, and value delivered to customers
May participate in security incident response activities and post-event reviews of security incidents
Supports subject-matter experts in the design, implementation, and maintenance of relevant cyber security solutions to business areas, project teams, and vendors
Participates in efforts to examine the technology vision, opportunities and challenges regarding security standards and the impact of the technology within the Cyber Security organization
Supports relevant metrics, controls, and other governance administration related to cyber security technology
Participates in on-call rotation for the support of any relevant cyber security technologies
Adheres to operational processes, standards, and procedures
Ensures compliance with risk management programs, rules and regulations, and cybersecurity practices; identifies opportunities for and supports process improvements; applies disciplined change management practices
May offer advice and guidance to junior engineers