IT Security Engineer

Fidelity Bank, NA•Wichita, KS

About The Position

Fidelity is a financial institution that uses innovative technology to evolve its products, services, and customer experience. Its information technology department keeps internal and external software, hardware, systems, and services online, updated, and secure. The IT Security Engineer supports the design, implementation, and continuous improvement of Fidelity’s enterprise security architecture and Information Security Program. The role works across security tools and controls, threat monitoring and response, vulnerability management, system reviews, identity and access controls, security hardening, and audit and compliance activities. It also develops and maintains security documentation, identifies opportunities to automate and improve security operations, and communicates technical security issues as business risks. The position requires professional judgment and discretion when handling sensitive information, and compliance with applicable banking laws, regulations, policies, and procedures.

Requirements

Ability to analyze and assess complex security issues and facilitate the development and implementation of effective compensating controls.
Interest in both the technical and business aspects of information security.
Ability to use logic and reasoning to identify strengths and weaknesses.
Critical thinking for medium- to complex-level situations and a forensic approach to challenges.
Willingness to handle confidential information with discretion and integrity.
Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence.
Attention to detail, desire to learn, and adaptability in a constantly changing environment.
Working knowledge of security fundamentals, including network security, encryption, PKI, authentication protocols, and secure architecture.
Experience with security tools such as Splunk SIEM, the Tenable endpoint detection platform, and firewalls.
Working knowledge of security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, and the NIST Cybersecurity Framework.
Strong organizational skills, including the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution.

Nice To Haves

Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field.
Equivalent combination of education, technical certifications, and relevant experience may be considered.
Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials.

Responsibilities

Assist in and support the design, implementation, and continuous improvement of the enterprise security architecture and Information Security Program.
Participate in the design, deployment, maintenance, and evolution of security tools and controls, including identity and access controls, monitoring, defensive security processes, SIEM, email security, firewalls, endpoint protection, and data loss prevention.
Monitor security alerts, investigate activity, and support incident response from detection through remediation.
Conduct vulnerability scans, track findings to resolution, and work with system owners to prioritize and apply fixes.
Administer and tune the SIEM platform by onboarding log sources, building and refining correlation rules and detection use cases, reducing false positives, and creating dashboards and reports.
Perform security reviews of new systems, vendors, applications, network changes, branch initiatives, and enterprise projects.
Harden operating systems, databases, network devices, applications, and cloud workloads against industry benchmarks such as the NIST Cybersecurity Framework.
Partner with Information Technology Operations to improve identity and access controls, including privileged access, conditional access, role-based access, and user lifecycle security controls.
Support audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, and maintaining documentation demonstrating control effectiveness.
Develop and maintain security standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned platforms and processes.
Track emerging threats and vulnerabilities and recommend improvements to the Information Security Program.
Participate in incident response exercises, tabletop drills, and on-call rotation as needed.
Identify opportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection capabilities, and mature the security posture.
Translate technical security issues into clear business risk language for IT, internal business units, risk, audit, and executive stakeholders.
Handle sensitive information and security incidents with professionalism, discretion, integrity, and sound judgment.
Comply with banking laws, rules, regulations, and prescribed policies, practices, and procedures relevant to the role.