Cyber Security Engineer III

About Working at Commerce 

Building a career here is more than just steps on a ladder. It’s about helping people find financial safety and success, helping businesses thrive, and making sure people and their money are taken care of. And our commitment doesn’t stop there. Our culture is about our people, the ones in our communities and the ones that work with us.  

Here, you’ll find opportunities to grow and learn, to connect with others, and build relationships with the people around you. You’ll have the space and resources to grow into the best version of yourself. Because our number one investment is you.

Creating an award-winning culture doesn't come easy. And after 160 years, we know Commerce Bank is only at its best when our people are. If this sounds interesting to you, keep reading and let’s talk. 

Compensation Range

At Commerce Bank, innovation and creativity are the driving forces behind our IT team's success. We are catalysts of transformation who power applications, secure networks, and implement cutting-edge initiatives that propel our business units forward. The banking industry's rapid evolution provides us with an exciting opportunity to continuously learn, grow, and harness new technologies that elevate the experience for our customers. What sets Commerce Bank apart is our company culture and leadership, areas in which we continually invest. This commitment fosters innovation, enhances customer and employee experiences, while reinforcing our belief that our diverse team is our greatest competitive advantage. We actively seek candidates who share our passion for technology and bring fresh perspectives to the table. A diversity of backgrounds, experiences, and viewpoints allows us to develop truly innovative solutions that meet the evolving needs of our banking community. Join us in shaping the future of banking technology. At Commerce Bank IT, you'll find a culture of equity, belonging, and endless opportunities to make a lasting impact. Help us drive innovation that raises the bar for our industry. 

About This Job

The main purpose of this job is to adhere to Incident Response protocol, administering Information Security systems, assess information risk, and identify and remediate vulnerabilities for IT security across the enterprise.

The individual will be focused on providing Incident Response, remote access stability, and managing enterprise logging through operations of SIEM utilities, intrusion detection system/intrusion prevention system (IDS/IPS), data loss prevention (DLP) and enterprise anti-virus solutions. The Cyber Security Engineer II will be well versed in Incident Response protocol and event management.

Essential Functions

• Proactively hunt for IOCs and IOAs across endpoints, networks, and cloud environments

• Develop hypotheses based on attacker tactics and techniques and use behavioral analysis to identify anomalous patterns related to authentication and access

• Collaborate with team members to investigate suspicious activity

• Perform Incident Response and event management, including Incident remediation protocol, lessons learned, and process improvement/efficiency

• Perform Intrusion prevention, administration of Information Security IPS systems, phishing monitoring and anti-phishing practices

• Handle remote access maintenance, administration and configuration

• Participate in the Internet Monitoring process in addition to Data Loss Prevention

• Perform Firewall administration, policy configuration and management of web application firewalls, VPN configuration and administration

• Perform Anti-virus anti-malware system maintenance and best practices configuration

• Perform Internal customer service related to access requests, troubleshooting, and problem resolution

• Promote awareness of applicable security standards, policy, and best practices across the Bank

• Perform other duties as assigned

Knowledge, Skills & Abilities Required

• Strong knowledge of Firewall, WAF, Virtual Private Network and Remote Access systems administration

• Strong knowledge of Internet Monitoring and Vulnerability Management systems

• Strong ability to administer IPS/IDS, SIEM technologies, Anti-Virus, and Data Loss Prevention systems

• Ability to work with threat intelligence, developing proactive best practices, monitoring and alerting, and remediation

• Strong project management skills or experience working within Information Security project implementations

• Motivated and organized self-starter with strong attention to detail and the ability to manage multiple priorities.

• Inquisitive, agile and strong team player with excellent written, verbal and interpersonal communication skills.

• Ability to remain adaptable and resilient to all situations with an optimistic outlook and cast a positive shadow that is aligned with our culture and Core Values.

• Intermediate level proficiency with Microsoft Word, Excel and Outlook

Education & Experience

• Bachelor’s Degree in Information Systems, Computer Science, Information Security, related field or equivalent combination of education and experience required

• 5+ years IT security or information security experience with ability to engage with internal customers and management required

• 5+ years experience conducting incident response remediation and process protocol required

• 5+ years experience in administering firewall, WAF, and Virtual private network systems/appliances required

• Windows and Linux workstation, server administration, and scripting experience required

• Prior experience working within a financial services organization preferred

• Certified Information Systems Security Professional (CISSP), or related certification preferred

*Remote Schedule: In office 1 day per week

**Must be eligible to work in the US without sponsorship now or in the future 

***For individuals applying, assigned and/or hired to work in areas with pay transparency requirements, Commerce is required by law to include a reasonable estimate of the compensation range for some roles.  This compensation range is for the Cyber Security Engineer III job and contemplates a wide range of factors that are considered in making compensation decisions, including but not limited to location, skill sets, education, relevant experience and training, licensure and certifications, and other business and organizational needs. The disclosed range estimate has not been adjusted for any applicable differentials (geographic, bilingual, or shift) that could be associated with the position or where it is filled. At Commerce, compensation decisions are dependent on the facts and circumstances of each situation. A reasonable estimate of the current base pay is $44.70 to $52.40 per hour. This position will be eligible for additional compensation through performance-based incentive plan(s) that will correspond to meeting performance goals.

**** The position is hybrid with the expectation to be in the Kansas City office 1 day a week.

#LI-CR1

The candidate selected for this position may be eligible for the following employment benefits: employer sponsored health, dental, and vision insurance, 401(k), life insurance, paid vacation, and paid personal time. In addition, we offer career development, education assistance, and voluntary supplemental benefits.  Click here to learn more.

Time Type: