Staff Security Engineer

FINRA • Rockville, MD

10h • Hybrid

About The Position

The Staff Security Engineer works under limited supervision and performs information security tasks commensurate with their experience to ensure applications and projects meet defined quality standards. The role applies security processes and techniques, designs and operates security controls, and supports compliance with internal and external requirements. The position also contributes to process improvement, provides feedback on security processes, and informally mentors junior staff.

The work is performed in a hybrid environment with defined in-person presence requirements. Occasional travel and extended hours may be required. The role requires collaboration, both in person and virtually, in support of FINRA’s mission of investor protection and market integrity, and adherence to FINRA’s values and technology policies. Work products must meet or exceed FINRA standards.

Compensation varies by location and candidate qualifications. The posted base salary ranges are: Boston, Jericho, Rockville, Tysons, and Washington, DC: $96,600–$172,800; Chicago and Philadelphia: $92,400–$165,300; Denver: $83,900–$150,300; Jersey City and New York City: $100,800–$180,400; Woodbridge: $96,600–$172,800; Connecticut and Washington State: $83,900–$180,400. Employees may be eligible for a discretionary bonus; non-exempt employees may be eligible for overtime pay as required by law.

FINRA offers comprehensive health, dental, and vision insurance; life and other insurance coverage; a 401(k) plan with company match and potential additional FINRA-funded retirement contributions; tuition reimbursement; commuter benefits; adoption assistance; backup family care; surrogacy benefits; employee assistance and wellness programs. Time off includes paid time off starting at 15 days and increasing with service up to 25 days, five personal days, nine sick days, two volunteer service days, various other paid leaves, and nine paid holidays for full-time employees.

FINRA employees are subject to its Code of Conduct, including brokerage-account disclosures, electronic-feed requirements, and investment and securities-account restrictions. Employees must execute FINRA’s Employee Confidentiality and Invention Assignment Agreement without qualification or modification and comply with the company’s nepotism policy.

Requirements

• Bachelor’s degree in Computer Science, Information Systems, or a related discipline with at least three years of related experience, or equivalent training and/or work experience.
• Direct experience in more than one of the following areas: securing networks and systems architecture, design and implementation; secure software assurance; intrusion detection, defense and incident response; security configuration management; access controls design and implementation; or security policy and standards development.
• Knowledge of communications protocols.
• Experience with one or more cybersecurity tools, including configuration assessment, log aggregation, integrity verification, web application security testing, network access control systems, network intrusion prevention systems, and endpoint security solutions.
• Strong written and verbal technical communication skills.
• Demonstrated ability to develop effective working relationships that improve the quality of work products.
• Well organized and thorough, with the ability to handle competing priorities.
• Ability to maintain focus and rapidly develop proficiency in new skills.
• Ability to work in a fast-paced environment.
• Solid knowledge of more than one information security principle and discipline.

Responsibilities

• Apply established processes and techniques to identify, validate, and prioritize security risks.
• Architect and design security control systems to address requirements.
• Operate and monitor established security controls.
• Ensure controls are operating effectively and resolve operating discrepancies.
• Review, triage, and prioritize control output.
• Recommend actions to resolve identified security discrepancies.
• Evaluate and recommend new security technologies, techniques, and tools.
• Review and help define information security policies, standards, guidelines, and procedures.
• Monitor and enforce compliance with internal and external regulations, policies, and standards.
• Recommend strategies to ensure compliance is effectively monitored and enforced.
• Lead or co-lead internal project- or program-level process improvement initiatives.
• Provide feedback on processes by offering suggestions.
• Informally mentor more junior staff.
• Assist with adherence to technology policies and comply with all security controls.
• Ensure work products meet or exceed FINRA standards.
• Collaborate in person and virtually in furtherance of FINRA’s mission of investor protection and market integrity.

Benefits

• Comprehensive health insurance
• Dental insurance
• Vision insurance
• Basic life, accidental death and dismemberment, supplemental life, spouse/domestic partner and dependent life, and related accidental death and dismemberment insurance
• Short- and long-term disability insurance
• Long-term care insurance
• Business travel accident insurance
• Legal insurance
• 401(k) plan with company match
• Potential additional FINRA-funded retirement contribution
• Tuition reimbursement
• Commuter benefits
• Adoption assistance
• Backup family care
• Surrogacy benefits
• Employee assistance
• Wellness programs
• Paid time off starting at 15 days, increasing with years of service up to 25 days
• Five personal days
• Nine sick days
• Two volunteer service days
• Military leave
• Jury duty leave
• Bereavement leave
• Voting and election official leave
• Care of a family member leave
• Childbirth and parental leave
• Nine paid holidays for full-time employees
• Discretionary bonus eligibility
• Overtime pay eligibility for non-exempt employees in accordance with applicable law

What This Job Offers

• Job Type: Full-time
• Career Level: Senior