Senior Security Engineer

Senior Security Engineer

The Senior Security Engineer will be a member of the Infosec Operations / SOC team, working on a primary mission of incident detection and response. They will participate in establishing and maintaining a corporate wide information security management program to ensure that information assets are adequately protected. As an East West Bank employee, the Senior Information Security Engineer will be part of a growing and stable organization that provides career path development opportunities while serving a growing and profitable market. The Senior Security Engineer will report to the Infosec Operations manager and work with senior members of the team to enhance and mature the security operations program.

Responsibilities

• Develop strategies, plans, and processes to achieve security requirements and address identified risks.
• Perform threat hunting and threat modeling to identify, report, and remediate risks, and assist in providing leadership with an overview of relevant risks and threats.
• Assist with and perform security and penetration testing efforts including coordinating, testing, reporting, and remediation of findings.
• Lead improvements in alerting rules and strategy to detect incidents, including creating new alerts and tuning.
• Assist in management and improvement of information security controls, tools, and systems, including EDR, DLP, NDR, and email security.
• Assist in the development of information security architecture, policies, principles and standards.
• Work with business units and with other risk functions to identify security requirements, using methods that may include risk and business impact assessments.
• Perform alert investigation and incident response activities in an on-call rotation, and as required, to meet SLAs.
• Assist in monitoring and response to malicious emails and participate in developing social engineering exercises.
• Assist in vulnerability management remediation and exception efforts including analyzing findings from network scanners and application security tools.

Qualifications

Compensation

The base pay range for this position is USD $130,000.00 / Yr. - USD $165,000.00 / Yr. Exact offers will be determined based on job-related knowledge, skills, experience, and location.