Senior Information Security Engineer

Farmers and Merchants Bank of Long Beach•Seal Beach, CA

3d•$123,760 - $211,120•Onsite

About The Position

The Senior Information Security Engineer is a highly technical, hands-on engineering role responsible for designing, implementing, and owning enterprise-grade security solutions across the Bank’s infrastructure, cloud platforms, and identity environments. This role operates with significant autonomy and is expected to function as a technical leader within the Security Engineering team. In addition to operational responsibilities, the Senior Information Security Engineer will drive security architecture patterns, detection engineering, and control strategy, partnering closely with the CISO, Information Security Architect, and IT leadership to influence enterprise security direction and risk posture. This role is expected to act as a subject matter expert and technical escalation point, proactively identifying gaps, engineering scalable solutions, and improving the maturity of the Bank’s security program through automation, optimization, and innovation. This role may require after-hours support for critical incidents and production issues.

Requirements

Deep expertise in enterprise security architecture and engineering principles.
Hands-on experience designing and implementing enterprise security technologies (firewalls, WAFs, IDS/IPS, EDR/XDR, SIEM, IAM).
Advanced knowledge of cloud security architecture (Azure, M365, Defender, Sentinel, Intune).
Strong understanding of detection engineering, threat intelligence, and MITRE ATT&CK mapping.
Experience with security logging pipelines and telemetry normalization.
Experience with enterprise networking and secure connectivity (segmentation, VPN, ZTNA).
Ability to perform packet capture analysis and adversary detection at scale.
Experience with secure SDLC, DevSecOps practices, and infrastructure-as-code security.
Experience with SOAR platforms or security automation frameworks.
Familiarity with threat hunting and adversary simulation concepts.
Proven ability to design security solutions from requirements with minimal supervision.
Ability to influence technical direction and security standards across teams.
Strong capability in root cause analysis and systems thinking.
Demonstrated experience leading technical initiatives or security engineering projects.
Ability to prioritize security risks in business context and communicate impact to leadership.
Experience mentoring engineers and raising team technical maturity.
Ability to operate in ambiguous environments and define solutions independently.
Minimum 7–9+ years of progressively responsible experience in information security engineering, architecture, or related technical roles.
Bachelor’s degree in computer science or equivalent experience required.
Demonstrated experience designing and implementing enterprise security solutions.
Experience leading complex security engineering projects.

Nice To Haves

Preferred certifications: CISSP, CCSP, GCIH, Azure Security Engineer, etc.
Preferred: cloud-native security architectures and advanced threat detection engineering.
Preferred: exposure to adversary emulation, red teaming, or purple team exercises.

Responsibilities

Design, engineer, and own end-to-end security solutions across on-premises, hybrid, and cloud environments (Azure, M365, SaaS).
Serve as a technical lead for security control design, translating architectural requirements into resilient, scalable, and auditable implementations.
Function as a security engineering escalation point for complex incidents, investigations, and cross-domain issues.
Lead configuration, tuning, and lifecycle management of enterprise security technologies (firewalls, WAF, IDS/IPS, EDR/XDR, SIEM, DLP, CASB, IAM solutions).
Develop and maintain advanced detection logic and use cases (SIEM rules, correlation searches, behavioral analytics).
Engineer and implement security automation and orchestration (Python, PowerShell, APIs, SOAR platforms) to reduce manual effort and improve response times.
Lead or support incident response activities, including containment strategy, root cause analysis, and post-incident remediation plans.
Perform threat modeling, risk assessments, and control gap analysis for systems and applications.
Collaborate with architects to define and enforce secure design patterns and reference architectures.
Evaluate emerging threats and technologies; recommend and implement security improvements aligned with evolving attack trends.
Conduct advanced vulnerability analysis and prioritize risk based on exploitability and business impact.
Analyze logs, network flows, and endpoint telemetry to identify and investigate sophisticated attack patterns and adversary behaviors.
Provide technical mentoring, guidance, and peer review for junior engineers and analysts.
Participate in security tool selection, evaluation, and proof-of-concept initiatives.
Participate in on-call rotation and function as a primary escalation engineer for high-severity incidents.
Lead or support major incident response efforts, including coordination across IT, vendors, and leadership.
Drive incident postmortems (RCA) and ensure corrective actions are implemented and validated.
Provide after-hours support for critical security events and production issues.
Ensure adherence to incident response playbooks, SLAs, and regulatory reporting requirements.
Ensure security engineering work aligns with regulatory frameworks and audit requirements (FFIEC, SOC 2, PCI DSS, etc.).
Partner with GRC and audit teams to provide technical validation, evidence, and control effectiveness reporting.
Support continuous control monitoring and compliance automation initiatives.
Ensure all engineered solutions adhere to banking regulations (BSA, AML, OFAC, CIP, privacy laws).