Information Security Engineer

Synovus Bank•Franklin, TN

About The Position

Consults at a senior level and provides professional support for major components of the firm's information security program. Supports technical analysis, design consulting, and product review of security components; leads the identification of new tools and techniques; and evaluates existing technical issues by researching innovative solutions to complex information security challenges. Manages project components through completion and consults with corporate teams in Information Technology and business environments to define security solutions. Provides input into the design, implementation, and maintenance of information security architecture, and supports the development and implementation of security architecture, standards, procedures, and guidelines across multiple platforms and diverse system environments. Assesses security risks, reviews networking initiatives for compliance, implements and maintains security tools, investigates security violations, monitors vulnerabilities, and advises management on critical issues. Provides security guidance and direct support to the firm and Information Technology staff, coordinates awareness programs, and contributes to a security-conscious firm culture. Participates in major projects with a low level of management oversight and takes part in an on-call rotation providing 24x7 coverage of corporate security infrastructure and network environments. During an assigned on-call period, resolves or escalates network issues. Also generates security- and network-related management information for internal reporting, including analysis of emerging trends. Team members are expected to understand and manage risk in their functional areas, follow applicable policies, procedures, laws, regulations, and risk limits, and promptly report known or suspected violations. The role also includes meeting clients' financial needs and referring them to specialty areas as appropriate, assisting other team members to deliver service, and performing other related duties as required. The description outlines the general nature of the work and is not a comprehensive list of duties or qualifications.

Requirements

Bachelor's degree in Information Technology, Business Administration, or a related field, or an equivalent combination of education and experience.
Eight years of information security experience, including a background in multiple information security technologies such as intrusion detection, penetration testing, and identity and access management.
Robust operational knowledge of the TCP/IP stack, network protocols, network topology and architecture, Windows and Unix operating systems, system log events, antivirus technologies, authentication systems (AD, LDAP, RADIUS, RACF), DNS, DHCP, SNMP, NetFlow, IP, and application development processes and lifecycles.
Ability to stand or walk regularly; talk and hear regularly; see objects up close or at a distance; use peripheral vision; identify basic colors; and use hands and reach.
Awareness of risk within the functional area and ability to follow applicable policies, procedures, laws, regulations, and risk limits and report known or suspected violations in a timely manner.

Nice To Haves

Certified Information Systems Security Professional (CISSP), Microsoft Certified Systems Engineer (MCSE), and/or Certified Network Engineer (CNE) certification.

Responsibilities

Support development and implementation of security architecture, standards, procedures, and guidelines for multiple platforms and diverse system environments.
Ensure security concerns are addressed and mitigated, and appropriate standards are defined and published.
Drive evaluation, testing, and implementation of emerging technologies and information systems security solutions.
Present proposed security enhancements to management for approval, funding, and implementation.
Perform security assessments and review networking initiatives for security compliance.
Prepare status reports and informational metrics on security matters; develop security risk analysis scenarios and response procedures.
Advise on the security of data networks and centralized data frameworks, coordinating with business units, users, and external networks.
Provide input into the design, implementation, and maintenance of information security architecture.
Analyze and determine technical requirements needed to mitigate security risks for Information Technology needs, plans, and initiatives.
Implement and maintain required security tools.
Investigate information security violations and monitor and communicate technical vulnerabilities.
Identify where security policies and procedures need to change or be created.
Conduct risk assessments and security briefings, and advise management of critical issues.
Evaluate products and procedures to enhance productivity and effectiveness.
Provide direct support to the firm and Information Technology staff on security-related issues.
Coordinate security awareness programs and educate personnel on security policies and practices.
Consult on security issues involving new and existing systems.
Monitor Information Technology assets for security requirements, including procedures, software, and integrity.
Help build and maintain a security-sensitive mindset within the firm's culture.
Participate in major projects and initiatives with a low level of management oversight.
Assist with development, implementation, monitoring, maintenance, and compliance of information security standards, policies, and procedures.
Participate in the on-call rotation providing 24x7 coverage of corporate security infrastructure and network environments; resolve or escalate issues during assigned on-call periods.
Generate security- and network-related management information for regular internal reporting, including high-level analysis of emerging trends.
Observe applicable policies, procedures, laws, regulations, and risk limits, and promptly report known or suspected violations.
Meet clients' financial needs and refer them to specialty areas such as Trust, Investments, Insurance, or Treasury Management as appropriate.
Assist other team members as needed to ensure delivery of distinctive service.
Perform other related duties as required.