Manager I, Cybersecurity Engineering

Navy Federal•Pensacola, FL

4d•Onsite

About The Position

Navy Federal Credit Union is hiring a Manager I, Cybersecurity Engineering to plan, supervise, and direct engineering functions within its Cybersecurity Technology Engineering (CTE) team. The role collaborates with CTE managers and supervisors to define the team’s strategic vision and provides leadership, guidance, and technical expertise to help protect the organization’s brand, data, and IT assets from cyber-based threats. The manager serves as a subject matter expert on the section’s functions, systems, policies, and procedures. The position oversees architecture, engineering, and operational work for solutions used by the CTE Network Security engineering team, including daily firewall, network access control, and intrusion prevention system operations. It establishes a standardized approach to network security policy management, serves as an escalation source for on-call engineers, and oversees technology and risk reviews, vulnerability and threat assessment, mitigation, and reporting. The manager also supports incident response and monitoring, develops technical documentation and standards, monitors staffing and resource allocation, and ensures operational work meets business and member-service standards. Applicants must be authorized to work in the United States without current or future sponsorship. The stated schedule is Monday through Friday, 8:00 a.m. to 4:30 p.m. Locations are 820 Follin Lane, Vienna, Virginia, and 5510 Heritage Oaks Drive, Pensacola, Florida.

Requirements

At least 5 years of experience as a Network Security Engineer; 10 years is preferred.
Significant experience with Palo Alto and/or Check Point firewalls.
Experience with Cisco ISE.
Significant progressively responsible experience in a large enterprise security operations center or IT operations environment, preferably at a large financial institution.
Expert knowledge of the cyber/information security systems engineering lifecycle.
Advanced knowledge of network and host-based forensic methodologies.
Advanced knowledge of enterprise-grade security technologies and capabilities, such as SIEM, DLP, UEBA, firewalls, and web proxies.
Advanced knowledge of the current threat landscape and adversary tactics, techniques, and procedures.
Advanced knowledge of information security programs and data security practices and procedures, including risk identification and assessment.
Significant experience supervising, guiding, and mentoring professional staff.
Significant experience managing multiple priorities independently and/or in a team environment to achieve goals.
Significant experience working with staff at all levels, management, stakeholders, and vendors.
Advanced initiative and judgment in making sound decisions.
Advanced diplomatic and tactful interpersonal skills with staff, management, vendors, and members.
Advanced analytical thinking skills, including summarizing information and identifying key elements, patterns, results, or relationships.
Advanced research, analytical, and problem-solving skills.
Advanced verbal and written communication skills.
Advanced database, word-processing, presentation, and spreadsheet software skills.
Advanced skill presenting findings, conclusions, alternatives, and information clearly and concisely.
Advanced skill communicating complex technical concepts to nontechnical audiences.
Advanced skill leading, guiding, and mentoring professional staff.
Advanced skill producing desired results to achieve goals and objectives.
Advanced planning, organization, and time-management skills.
Bachelor’s degree in Information Technology, Engineering, or a related field, or an equivalent combination of education, training, and experience.

Nice To Haves

Experience in the financial sector.
Experience migrating Layer 4 firewall policies to Layer 7.
Working knowledge of NFCU’s functions, philosophy, operations, systems, software, and organizational objectives.
GIAC, CEH, CISSP, Security+, or related information security certifications.
Professional certification such as CCNP, CISSP, CCIE, or PCNSE.
Significant experience leading IT projects.
Demonstrated proficiency in establishing processes and procedures.

Responsibilities

Oversee architecture, engineering, and operational efforts for solutions needed by the CTE Network Security engineering team.
Manage daily operations for firewalls, network access controls, and intrusion prevention systems, and provide vision for efficient operations.
Ensure a standardized approach to network security policy management.
Act as an escalation source for on-call engineers.
Oversee assessments and reviews of current technology to identify key risk areas and ensure adequate controls are in place.
Oversee vulnerability and threat assessments, mitigation, and reporting activities.
Identify and resolve operational and performance gaps and obstacles; recommend and implement changes and improvements.
Ensure work quality, methods, procedures, processes, and production statistics meet business goals and member-service standards.
Develop guidelines, standards, policies, procedures, and other technical documentation.
Guide and support the Incident Response & Monitoring team in detecting, analyzing, containing, and eradicating malicious activity.
Maintain knowledge of and ensure compliance with applicable laws, regulations, NFCU policies and procedures, and service-level agreements.
Research, gather, and synthesize data, and present conclusions and recommendations to management.
Monitor the work environment and direct resource allocation to ensure adequate staffing for production and member-service standards.
Escalate operational and budget issues or service impacts to management in a timely manner, including relevant risk and impact information.
Perform other duties as assigned.