Apply on Employer Site

Federal Reserve Bank of Chicago · 11 hours ago

Senior Information Security Engineer

Chicago, IL

Full-time

Onsite

Mid, Senior Level

$140K/yr - $166K/yr

3+ years exp

Federal Reserve Bank of Chicago is one of 12 regional Reserve Banks that make up the nation's central bank, promoting a safe and stable financial system. The Senior Information Security Engineer will manage the vulnerability management program, establish observability processes, and support cyber incident response, ensuring robust security measures across the organization.

BankingFinanceFinancial Services

No H1B

Security Clearance Required

U.S. Citizen Only

Responsibilities

Manages and maintains the organization’s vulnerability management program, including but not limited to: compiling metrics and performance across the enterprise and its products; improving and maintaining processes to categorize vulnerabilities and route to appropriate implementation teams for resolution; supporting FRFS cyber risk assessment, evaluation and tolerance processes; tracking and ongoing reporting of key performance and risk indicators; serving as a liaison between FRFS IS and other key internal and external stakeholders (i.e., FRFS Enterprise Risk, FRFS Resiliency, auditors, and external customers and Financial Services industry partners, etc.)

Establishes and maintains end-to-end observability processes and improvements, including but not limited to: defining key alerts and monitors in centralized tools to support an effective incident response process; ensuring effective monitoring to support a robust end-to-end security posture; collaborating with other shared services teams to bring the vision to reality in iterative and incremental fashion

Key participant in cyber incident response processes and maintainer of associated processes and procedures

Maintains relationships with business areas that interact with FRFS, District, and National governance processes in a moderately complex manner on a regular basis

Supports the collection and tracking of cybersecurity and threat intelligence information via open-source and private partnerships

Qualification

Vulnerability managementCyber incident responseEnd-to-end monitoringDevSecOps frameworksSIEM toolsCryptographic technologiesLearning mindsetCommunication skillsCollaboration skills

Required

Experience supporting agile processes utilizing DevSecOps frameworks

Experience in end-to-end monitoring and alerting solutions, SIEMs, and equivalent technologies in support of anomalous activity monitoring/escalation/triage

Familiarity with Splunk, DataDog, and related SIEM tools

Familiarity with contemporary scripting tools such as Powershell, Unix shells, etc

Familiarity with security orchestration and data transformation processes

Experience supporting cyber incident response activities

Experience collaborating with senior management to define, track and manage key risk indicators (KRIs) used to assess security and operational posture

Experience collaborating in cross-functional teams to implement industry best practices such as least-privilege enforcement, infrastructure segmentation, DNSSEC, and zero trust architecture

Experience supporting open-source intel gathering and socialization to ensure situational awareness of key threats facing private and public organizations and the financial services industry

Familiarity with cryptographic and public key technologies including, but not limited to, TLS, PKI, Multi-factor Authentication solutions, RSA, and Elliptic Curve Cryptography

Familiarity in low-code/no-code workflow solutions and application lifecycle management solutions

Bachelor's degree in computer science, information systems, business, or a related field; or the equivalent combination of education and experience

3+ years of demonstrated experience in program management, workflow automation, and/or incident response within an IT enterprise

Strong oral and written communication skills to support engagement across technical and business stakeholders

Learning mindset geared toward innovation and creativity for applying technology capabilities in new ways, necessary for both the delivery of effective technology and business solutions

Existing SECRET security clearance or must meet eligibility requirements to apply for clearance

Applicants must be currently authorized to work in the United States without the need for visa sponsorship now or in the future

Benefits

Comprehensive benefits package include medical, dental, vision, prescription drug coverage, 401k savings plan, retirement plan, paid time off, transit benefit, onsite gym and subsidized cafeteria

A continuous learning environment with opportunities to gain new skills and grow your career

The Chicago Fed offers benefits to support overall health and financial security.