IT Security Engineer

Fidelity Bank • Wichita, KS

1d

About The Position

Fidelity is a financial institution that uses innovative technology to evolve its products, services, and customer experience. Its information technology department keeps internal and external software, hardware, systems, and services online, updated, and secure. The IT Security Engineer supports the design, implementation, and continuous improvement of Fidelity’s enterprise security architecture and Information Security Program. The role works across security tools and controls, monitoring and incident response, vulnerability management, security reviews, system hardening, identity and access controls, and audit and compliance activities. It also maintains security documentation, helps improve security operations and detection capabilities, communicates security risks to stakeholders, and handles sensitive information with professionalism and discretion. The role requires compliance with applicable banking laws, regulations, policies, and procedures.

Requirements

• Ability to analyze and assess complex security issues and facilitate the development and implementation of effective compensating controls.
• Keen interest in both the technical and business aspects of information security.
• Ability to use logic and reasoning to identify strengths and weaknesses.
• Critical-thinking skills for medium- to complex situations and a forensic approach to challenges.
• Willingness to handle confidential information with discretion and integrity.
• Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence.
• Attention to detail, desire to learn, and adaptability in the face of constant change.
• Working knowledge of security fundamentals, including network security, encryption, PKI, authentication protocols, and secure architecture.
• Experience with security tooling such as Splunk SIEM, the Tenable endpoint detection platform, and firewalls.
• Working knowledge of security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, and the NIST Cybersecurity Framework, as well as related industry guidance.
• Strong organizational skills, including the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution.

Nice To Haves

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or a related field; equivalent combinations of education, technical certifications, and relevant experience may be considered.
• Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials.

Responsibilities

• Assist with and support the design, implementation, and continuous improvement of enterprise security architecture and the Information Security Program.
• Participate in the design, deployment, maintenance, and evolution of security tools and controls, including identity and access controls, monitoring, defensive security processes, SIEM, email security, firewalls, endpoint protection, and data loss prevention.
• Monitor security alerts, investigate activity, and support incident response from detection through remediation.
• Conduct vulnerability scans, track findings to resolution, and work with system owners to prioritize and apply fixes.
• Administer and tune the SIEM platform, including onboarding log sources, refining correlation rules and detection use cases, reducing false positives, and creating dashboards and reports.
• Perform security reviews of new systems, vendors, applications, network changes, branch initiatives, and enterprise projects; identify and ensure implementation of appropriate security requirements.
• Harden operating systems, databases, network devices, applications, and cloud workloads against industry benchmarks such as NIST CSF.
• Partner with Information Technology Operations to improve identity and access controls, including privileged access, conditional access, role-based access, and user lifecycle security controls.
• Support audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, and maintaining control-effectiveness documentation.
• Develop and maintain security standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned platforms and processes.
• Track emerging threats and vulnerabilities and recommend improvements to the Information Security Program.
• Participate in incident response exercises, tabletop drills, and on-call rotation as needed.
• Identify opportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection, and mature the security posture.
• Translate technical security issues into clear business-risk language for IT, business units, risk, audit, and executive stakeholders.
• Handle sensitive information and security incidents with professionalism, discretion, integrity, and sound judgment.
• Comply with banking laws, rules, regulations, and prescribed policies, practices, and procedures to reduce risk and uphold ethical standards.

What This Job Offers

• Job Type: Full-time
• Education Level: No Education Listed