Information Security Engineer II

CardWorks•Woodbury, MN

6d•Hybrid

About The Position

CardWorks Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, CardWorks Financial Group tackles the complex challenges that larger financial institutions leave behind. We’re embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer. CardWorks Servicing, LLC provides end- to end operational servicing functions for credit cards, secured cards, and installment loans.  We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees. Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses. Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a closely related field.
Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation.
Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation must be in the Credit Card Industry or Consumer Finance Industry.
Demonstrable knowledge and prior experience in: Advanced security event monitoring, investigation, and response capabilities.
Engineering, tuning, and operating on the SIEM platform.
Security concepts, defense-in-depth strategies, security tools, and protocols.
Communicating security issues and risks to individuals with technical and non-technical backgrounds.
Troubleshooting and problem-solving complex security, hardware, and network systems.
Researching cybersecurity and technology trends, news, and hacking techniques.
Kusto Query Language (KQL).

Responsibilities

Implement, operate, monitor, and improve information security processes and systems that protect the Bank’s data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism.
Perform security incident event management and network intrusion detection using security concepts, defense-in-depth strategies, security tools, and protocols.
Engage in the support of security-focused tools and services.
Conduct security event monitoring, investigation, detection, and incident response, including log analysis and documentation of investigations.
Perform incident response on escalated tickets.
Participate in major incident response engagements.
Use a variety of tools to monitor system and application log alerts for indication of unauthorized activity and perform analysis on infected systems.
Engineer, tune, and operate log sources, alerts, rules, and monitors in the Security Information and Event Management (SIEM) platform, that collects, correlates, and analyzes security logs and events in real-time to detect threats and enable rapid incident response.
Work with IT Security Engineers and assist with gathering information during penetration testing, incident handling/digital forensics, continuous monitoring, and intrusion detection/prevention.
Work with auditors to provide the required evidence of compliance with the regulatory bodies.
Comply with all the Bank’s internal control policies and procedures.
Understand and comply with all laws and regulations to which the Bank is subject.
Communicate problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
Communicate security issues and risks to individuals with technical and non-technical backgrounds.
Troubleshoot and problem-solve complex security, hardware, and network systems.
Research cybersecurity and technology trends, news, and hacking techniques.
Use Kusto Query Language (KQL) to run advanced queries for threat hunting, anomaly detection, and security event investigations in the XDR platform.