Information Security Specialist I

Federal Home Loan Bank of Pittsburgh•Pittsburgh, PA

About The Position

The Information Security Specialist plays a vital role in protecting the Bank’s information assets by ensuring the integrity, confidentiality, and availability of systems across the enterprise. This position is responsible for the effective application of security controls across both business operations and technology environments. The successful candidate will perform security administration, conduct continuous monitoring, and lead investigations into security events triggered by the Bank’s security infrastructure. FHLBank Pittsburgh provides reliable funding and liquidity to its member financial institutions, which include commercial and savings banks, community development financial institutions, credit unions and insurance companies in Delaware, Pennsylvania and West Virginia. FHLBank products and resources help support community lending, housing and economic development. As one of 11 Federal Home Loan Banks established by Congress, FHLBank has been an integral and reliable part of the financial system since 1932.

Requirements

Bachelor’s degree in Computer Science, Information Systems or related degree or equivalent work experience
At least one of the following professional Security-related certifications required: CISSP, SANS GIAC, CCSP
Five or more years of experience in an information security role
At least two years of hands-on experience with firewall administration
Hands-on experience with administering security in Windows Active Directory Security
Demonstrated knowledge of managing and administering spam filtering system
Demonstrated knowledge of securing and administering security on multiple operating environments: Linux, Windows
Demonstrated knowledge of host-based and network-based Intrusion Detection System concepts
Experience with DDOS mitigation and related network traffic risk mitigation techniques
Experience with Network Access Control Platforms and Procedures
Candidates with at least three years of experience in an information security role and Windows Active Directory Security will be considered for an alternative role.

Responsibilities

Supports the efficient and effective implementation and maintenance of security for the Bank's information assets and resources
evaluates, installs and maintains security software on a variety of platforms
actively promotes the advancement of sound security policies and procedures.
Provides customer support for email processing and security, Help Desk ticket queues for security and account requests.
Monitoring and investigation of security events generated by the Bank’s security infrastructure
Designs appropriate security measures in new system development efforts as defined by security requirements, product options and implementation strategies.
Evaluates, engineers, and recommends security enhancements to Bank’s current environment and architecture.
Establishes and executes procedures for authorizing access to information across all platforms to appropriately restrict access.
Participates in establishing and maintaining security policies and procedures
Provides daily support and management of Security incident and event Management (SIEM) solution according to industry best practice and Bank policy.
Performs monitoring, analysis, and reporting of security events across a complex environment.
Establishes and executes procedures for performing self-audits of the security administration function to detect inappropriately defined security parameters.
Manages bank firewalls to ensure access and controls are properly applied to all systems.
Manages security systems (IDS, firewall, mail/web filtering, etc.) to ensure systems are properly functioning and upgraded.
Works with business users to ensure proper access to applications is in place.
Regularly reviews systems and networks to ensure compliance with IT Security policy.
Assists in the designing of network architecture to ensure industry-standard network practices are enforced.
Deciphers network packet captures for troubleshooting.
Ensures compliance with applicable policies, procedures, and regulations to ensure safe and sound business operations.