Network Security Engineer

Columbia Bank•Irvine, CA

16d•$115,000 - $140,000•Onsite

About The Position

Implements, administers, and/or monitors bank security systems and solutions that encompass perimeter defense, security operations, identity and access management, and incident response. Systems and processes may include, but are not limited to: Firewalls, intrusion detection/prevention systems, content filtering, data loss prevention, vulnerability management, endpoint protection, network access control, security information and event management, identity governance and administration, single sign on, public key infrastructure, privileged account management, security monitoring, data analysis, alert tuning, and incident triage. Day to day tasks entail supporting, maintaining and enhancing technical controls to prevent, detect, or respond to cybersecurity threats; comply with regulatory standards; or align to industry best practice. Administer one or more of the following core enterprise security services: Firewalls, Intrusion Detection/Prevention System, Proxy, Mail Gateways, Data Loss Prevention, Denial of Service Protection, Network Access Control, Endpoint Protection Suite, Advanced Malware Prevention, Vulnerability Management, Security Information and Event Management, Identity Governance, Single Sign-On, Public Key Infrastructure, or Privileged Account Management. Identify security gaps and control deficiencies, and determine steps to mitigate findings. Requires continuous self-reflection and learning of soft/technical skills to accommodate constantly changing e-business and cybersecurity landscape. Experience with security alert analysis, malware analysis, packet analysis, incident containment, eradication and recovery, and forensic investigations Prepare technical and executive security reports including tracking of key performance / risk metrics. Coordinate across functional teams to troubleshoot and resolve service disruptions; requires participation in after-hours on-call rotation and after-hours ad-hoc incident resolution. Ability to participate in after-hours on-call rotation and ad-hoc incident resolution Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes. Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training. Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description. May be asked to coach, mentor, or train others and teach coursework as subject matter expert. Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words. Takes personal initiative and is a positive example for others to emulate. Embraces our vision to become “Business Bank of Choice” May perform other duties as assigned.

Requirements

Demonstrated experience with administering enterprise services including client and server systems, security tools and applications, directory services, firewalls, IDS/IPS, security gateways, routers, and switches, required.
Knowledge of operating system fundamentals, networking fundamentals, network protocols, web applications, and critical security controls.
Knowledge of common attacker tactics and techniques.
Knowledge of internal audit concepts and regulatory requirements (e.g. SOX, GLBA, etc.).
Ability to prioritize tasks and work though issues and obstacles with minimal guidance and coaching.
Ability to work individually and as part of a team.
Proficient written/verbal communications skills.

Nice To Haves

H.S. Diploma/GED (preferred)
Bachelor's Degree in Information Security (preferred)
4-7 years — of information technology. (Preferred)
2-4 years — of information/cyber security experience or college training (Preferred)

Responsibilities

Implements, administers, and/or monitors bank security systems and solutions that encompass perimeter defense, security operations, identity and access management, and incident response.
Administer one or more of the following core enterprise security services: Firewalls, Intrusion Detection/Prevention System, Proxy, Mail Gateways, Data Loss Prevention, Denial of Service Protection, Network Access Control, Endpoint Protection Suite, Advanced Malware Prevention, Vulnerability Management, Security Information and Event Management, Identity Governance, Single Sign-On, Public Key Infrastructure, or Privileged Account Management.
Identify security gaps and control deficiencies, and determine steps to mitigate findings.
Requires continuous self-reflection and learning of soft/technical skills to accommodate constantly changing e-business and cybersecurity landscape.
Experience with security alert analysis, malware analysis, packet analysis, incident containment, eradication and recovery, and forensic investigations
Prepare technical and executive security reports including tracking of key performance / risk metrics.
Coordinate across functional teams to troubleshoot and resolve service disruptions; requires participation in after-hours on-call rotation and after-hours ad-hoc incident resolution.
Ability to participate in after-hours on-call rotation and ad-hoc incident resolution
Demonstrates compliance with all bank regulations for assigned job function and applies to designated job responsibilities – knowledge may be gained through coursework and on-the-job training. Keeps up to date on regulation changes.
Follows all Bank policies and procedures, compliance regulations, and completes all required annual or job-specific training.
Maintain a working knowledge of Bank's written policies and procedures regarding Bank Secrecy Act, Regulation CC, Regulation E, Bank Security and other regulations as applicable to this job description.
May be asked to coach, mentor, or train others and teach coursework as subject matter expert.
Actively learns, demonstrates, and fosters the Columbia corporate culture in all actions and words.
Takes personal initiative and is a positive example for others to emulate.
Embraces our vision to become “Business Bank of Choice”
May perform other duties as assigned.

Benefits

comprehensive healthcare coverage (medical, dental, and vision plans)
a 401(k)-retirement savings plan with employer match for qualifying associate contributions
an employee assistance program
life insurance
disability insurance
tuition assistance
mental health resources
identity theft protection
legal support
auto and home insurance
pet insurance
access to an online discount marketplace
paid vacation, sick days, volunteer days, and holidays