Manager I, Cybersecurity Engineering

Navy Federal Credit Union•Pensacola, FL

5d•$133,000 - $208,500•Onsite

About The Position

Plan, supervise, and direct engineering functions within the Cybersecurity Technology Engineering (CTE) team. Collaborate with CTE managers and supervisors to define the team's strategic vision. Provide leadership, guidance, and technical expertise to ensure appropriate security protocols protect Navy Federal Credit Union's brand, data, and IT assets from cyber-based threats. Serve as a subject matter expert on the section's functions, systems, policies, and procedures. The role oversees architecture, engineering, and operational work for network security solutions and manages daily operations for firewalls, network access controls, and intrusion prevention systems. It supports incident response, vulnerability and threat assessment, risk management, policy development, and operational performance. The position also manages staffing and resource allocation, escalates operational and budget issues, and ensures compliance with applicable laws, regulations, policies, procedures, and service-level agreements. The position is based at one of the listed Navy Federal locations in Vienna, Virginia, or Pensacola, Florida, and has hours of Monday through Friday, 8:00 a.m. to 4:30 p.m. Applicants must be authorized to work in the United States without current or future sponsorship.

Requirements

At least 5 years of experience as a Network Security Engineer; 10 years preferred.
Significant experience with Palo Alto and/or Check Point firewalls.
Experience with Cisco ISE.
Significant progressively responsible experience in a large enterprise security operations center or information technology operations; experience in a large financial institution is preferred.
Expert knowledge of the cyber/information security systems engineering lifecycle.
Advanced knowledge of network and host-based forensic methodologies.
Advanced knowledge of enterprise-grade security technologies and capabilities, such as SIEM, DLP, UEBA, firewalls, and web proxies.
Advanced knowledge of the current threat landscape and adversary tactics, techniques, and procedures.
Advanced knowledge of information security programs and data security practices and procedures, including risk identification and assessment.
Significant experience supervising, guiding, and mentoring professional staff.
Significant experience independently and/or collaboratively managing multiple priorities to achieve goals.
Significant experience working with staff at all levels, management, stakeholders, and vendors.
Advanced initiative and judgment in making sound decisions.
Advanced ability to interact diplomatically and tactfully with staff, management, vendors, and members.
Advanced analytical thinking, including summarizing information and identifying key elements, patterns, results, and relationships.
Advanced research, analytical, and problem-solving skills.
Advanced verbal and written communication skills.
Advanced database, word-processing, presentation, and spreadsheet software skills.
Advanced ability to present findings, conclusions, alternatives, and information clearly and concisely.
Advanced ability to communicate complex technical concepts to non-technical audiences.
Advanced ability to lead, guide, and mentor professional staff.
Advanced ability to produce desired results and achieve goals and objectives.
Advanced planning, organizational, and time-management skills.
Bachelor's degree in Information Technology, Engineering, or a related field, or an equivalent combination of education, training, and experience.

Nice To Haves

Experience in the financial sector.
Experience migrating Layer 4 firewall policies to Layer 7.
Working knowledge of Navy Federal's functions, philosophy, operations, systems, software, and organizational objectives.
GIAC, CEH, CISSP, Security+, or related information security certifications.
Professional certification such as CCNP, CISSP, CCIE, or PCNSE.
Significant experience leading IT projects.
Demonstrated proficiency in establishing processes and procedures.

Responsibilities

Oversee architecture, engineering, and operational efforts for solutions needed by the CTE Network Security engineering team.
Manage daily operations for firewalls, network access controls, and intrusion prevention systems.
Provide a vision for efficient management of daily operations.
Ensure a standardized approach to network security policy management.
Serve as an escalation source for on-call engineers.
Oversee technology assessments and reviews to identify key risk areas and ensure adequate controls are in place.
Oversee vulnerability and threat assessments, mitigation, and reporting.
Identify and resolve operational and performance gaps and obstacles, and recommend and implement improvements.
Ensure work quality, methods, procedures, processes, and production statistics meet business goals and member-service standards.
Develop guidelines, standards, policies, procedures, and other technical documentation.
Guide and support the Incident Response & Monitoring team in detecting, analyzing, containing, and eradicating malicious activity.
Maintain knowledge of and ensure compliance with applicable federal and state laws, regulations, Navy Federal policies and procedures, and service-level agreements.
Research, gather, and synthesize data, and present conclusions and recommendations to management.
Monitor the work environment and allocate resources to maintain adequate staffing and meet production and member-service standards.
Escalate operational and budget issues, or impacts to services, to management in a timely manner with information about risk and impact.
Perform other duties as assigned.