Information Security Engineer

Peoples Bank • Louisville, KY

3h

About The Position

This position drives the assessment, implementation, and continuous improvement of cybersecurity controls across Peoples Bank's technology environment. This role serves as a liaison between Information Security, Information Technology, application teams, vendors, and managed service providers to help identify risks, document current-state environments, support technology modernization initiatives, and ensure security requirements are incorporated into business and technology projects. The successful candidate combines technical aptitude, strong organizational skills, and the ability to communicate effectively with both technical and non-technical stakeholders. This role owns security engineering activities for assigned assessments, implementations, remediation efforts, documentation, and operational improvement initiatives, while partnering with IT, application teams, vendors, and managed service providers to implement secure and scalable solutions.

Requirements

• Bachelor’s degree or equivalent work experience
• 5+ years of experience in cybersecurity, systems administration, engineering, infrastructure, identity management, or related technology disciplines
• Demonstrated ability to lead technology assessments, implementations, or operational improvement initiatives
• Strong understanding of Microsoft 365, Active Directory, Entra ID, endpoint security, vulnerability management, and access management concepts
• Experience evaluating technology risks and recommending practical security improvements
• Experience coordinating technical activities across security, infrastructure, application, and vendor teams
• Ability to translate technical concepts into business-focused recommendations and action plans
• Strong communication, facilitation, and organizational skills
• Ability to independently drive complex initiatives from assessment through implementation
• Experience leading security technology implementations
• Experience designing or improving identity, endpoint security, remote access, or security monitoring capabilities
• Experience developing roadmaps, implementation plans, and operational procedures
• Experience mentoring technical staff and serving as a technical lead
• Experience presenting recommendations to technical and business stakeholders
• Familiarity with CRI, NIST CSF, CIS Controls, or other security frameworks
• Experience with Microsoft security technologies including Defender, Entra ID, Conditional Access, Sentinel, or related platforms
• Basic scripting and automation experience
• Team player
• Valid driver’s license

Nice To Haves

• Some travel required

Responsibilities

• Lead assessments of endpoint security, remote access solutions, Microsoft security capabilities, identity and access management processes, logging capabilities, and other priority technology areas
• Gather and document current-state configurations, workflows, ownership, dependencies, and control gaps
• Lead the technical direction and continuous improvement of vulnerability management, including prioritization, complex remediation decisions, compensating controls, and escalation of unresolved risk
• Identify opportunities to improve security controls while balancing operational requirements
• Develop recommendations and implementation roadmaps
• Participate in technology projects to identify security requirements related to identity, endpoint protection, logging and monitoring, data protection, vendor access, and system administration
• Lead or coordinate technology evaluations, pilots, proof-of-concepts, and implementation activities
• Coordinate technical discussions among Information Security, Information Technology, application teams, vendors, and managed service providers
• Track project findings, recommendations, action items, risks, dependencies, and remediation efforts through completion
• Develop and maintain process documentation, technical standards, diagrams, inventories, and support materials
• Document current-state architectures, workflows, technology dependencies, and security control implementations to support assessments and modernization initiatives
• Maintain inventories of security technologies and capabilities
• Coordinate development and refinement of security procedures and operating practices
• Partner with security operations personnel to understand operational challenges and ensure security improvement initiatives align with operational requirements
• Support audits, examinations, and regulatory requests as assigned
• Serve as a security representative for technology initiatives and projects
• Work closely with Information Security, IT, business teams, vendors, and managed service providers
• Communicate project status, risks, recommendations, and findings to stakeholders
• Promote cybersecurity awareness and adoption of security best practices throughout the organization

Benefits

• 401(k) retirement plan with an employer match
• employee stock purchase plan
• various education assistance programs such as student loan and tuition paydown/reimbursement
• paid vacation
• holidays

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree