Summary: Responsible for the day-to-day security operations at Columbia Bank. The individual will serve as a technical operations subject matter expert and will be responsible for the proper maintenance of security controls, detection of and response to potential threats, and remediation and escalation of incidents. Supports the cyber incident response team, provides guidance to technology operators, and ensures execution of processes. The Security Engineer’s core responsibilities include threat and vulnerability management; identifying security risks, assessing exposures, and implementing measures to protect organizational systems and data.
Job Responsibilities:
Security Operations
- Executes, enhances, and creates/maintains documentation for security operations processes.
- Supports one or more security practice area and aids in the assessment of security processes, platforms, and practices to identify areas for improvement.
Incident Response Support
- Supports incident response efforts by reviewing security events and escalations, performing investigations, and seeing matters through to resolution.
- Collaborates with technology and business organizations as appropriate.
Security Platform Management
- Performs ongoing security platform maintenance including health monitoring, troubleshooting, tuning, and upgrades.
- Assists in implementing and operationalizing new security solutions. Coordinates with internal and external resources as required.
Analytical Responsibility
- Develops and analyzes security related content - reports, alerts, dashboards, and metrics - to gain insights from the Bank's systems, platforms, and data.
- Utilizes content outputs to drive subsequent action plan through to completion.
Project Management
- Assists in the management of small to medium sized projects according to project management schedules.
Professional Development
- Stays abreast of relevant industry related developments, trends, and threats.
- Commits to ongoing professional education and development in the Information / Cyber Security field.
- Performs other job-related duties as assigned.
Other Responsibilities
- Performs other job-related duties as assigned.
Requirements:
- Bachelor’s degree in an IT related discipline required.
- At least 5 years of experience in information technology, information security, risk, or similar field.
- 3+ years of experience in an information security role.
- 1+ years of engineering experience.
- Relevant industry certifications and/or advanced degrees may be considered in lieu of experience.
- Knowledge of one or more security practice areas including security architecture, identity and access management, asset management, vulnerability management, threat detection and response, endpoint security, network security, cloud security, web security, email security, data security, application security, threat intelligence, configuration management.
- Performs ongoing analysis of various security events, incident alerts, event notifications, health status from security tools, and additional detection and response activities.
- Investigates security incidents and collaborates with the CISO and business organizations in response to detected threats.
- Coordinates with internal and external resources for risk mitigation and service outage resolution.
- Develops standard operating procedures for deployed security solutions, interfacing with managed security service providers, incident responses, review and escalation processes.
- Communicates security warnings, ongoing awareness, and general best practices to end-users.
- Develops performance metrics, trend statistical data, and customizes management reports for Risk, IT and Information Security.
- Knowledge of securing network/infrastructure design and deployment.
- Experience in conducting a daily assessment of vulnerabilities identified by infrastructure scans.
- Evaluate, rate, and perform risk assessments on assets.
- Prioritizing vulnerabilities discovered along with remediation timeline(s).
- Knowledge of scripting languages and automation methodologies.
- Knowledge of intrusion detection methodologies and techniques for detecting host and network-based intrusions.
- Experience with log analysis, packet flow, TCP/UDP traffic, firewall technologies, IDS technologies (e.g., Snort rules), proxy technologies, and antivirus, spam and spyware solutions.
- Deep knowledge of computer networking concepts and protocols, and network security methodologies.
- Knowledge of cybersecurity management frameworks, regulatory requirements and industry leading practices.
- Experience in conducting technical risk assessments.
- Commits to ongoing professional education / training / certification in the Information / Cyber Security field.
Columbia Bank offers the following benefits:
- Medical, Dental, Vision and Rx which are contributory.
- Bonus programs.
- Employee Stock Option Program (ESOP).
- Life Insurance, Long Term Disability and Accidental Death and Dismemberment (LTD&AD&D).
- Paid Time Off (PTO) which includes Personal and Vacation Time.
- Paid Sick Time.
- Bank Holidays.
- Employees may participate in the 401k program.
Schedule:
- This role is eligible for a hybrid schedule: 3 days in the office and 2 days work from home, based on business needs. This arrangement may change without notice.
Columbia Bank and its affiliates is an Equal Opportunity Employer, including individuals with disabilities and veterans.
Skills Required
- Bachelor's degree in an IT related discipline
- At least 5 years of experience in information technology, information security, risk, or similar field
- 3+ years of experience in an information security role
- 1+ years of engineering experience
- Relevant industry certifications and/or advanced degrees may be considered in lieu of experience
- Knowledge of security practice areas including security architecture, IAM, asset management, vulnerability management, detection and response, endpoint, network, cloud, web, email, data, application security, threat intelligence, configuration management
- Perform ongoing analysis of security events, incident alerts, and health status from security tools
- Investigate security incidents and collaborate with CISO and business organizations
- Coordinate with internal and external resources for risk mitigation and outage resolution
- Develop standard operating procedures for deployed security solutions and MSSP interfacing
- Communicate security warnings, awareness, and best practices to end-users
- Develop performance metrics, trends, and customized management reports for Risk, IT and InfoSec
- Knowledge of securing network/infrastructure design and deployment
- Experience conducting daily assessment of vulnerabilities identified by infrastructure scans
- Evaluate, rate, and perform risk assessments on assets and prioritize vulnerabilities with remediation timelines
- Knowledge of scripting languages and automation methodologies
- Knowledge of intrusion detection methodologies and host/network-based intrusion detection techniques
- Experience with log analysis, packet flow, TCP/UDP traffic, firewall technologies, IDS (e.g., Snort rules), proxy technologies, antivirus, spam and spyware solutions
- Deep knowledge of computer networking concepts, protocols, and network security methodologies
- Knowledge of cybersecurity management frameworks, regulatory requirements and industry best practices
- Experience conducting technical risk assessments
- Commitment to ongoing professional education/training/certification in Information/Cyber Security
What We Do
You can Count on Columbia for all your personal banking needs in New Jersey. We’re more than just a bank – we’re your personal banker for life. As the largest independent bank in New Jersey, Columbia Bank is motivated by forming long-term relationships with our customers. Our team of experienced banking professionals provides our customers and the communities of New Jersey with unprecedented service and financial security. With conveniently located full-service branches in New Jersey, we believe that’s why individuals and families across New Jersey Count on Columbia to manage their personal bank accounts. Already have a personal bank account with us? We also offer business banking services, with the same service standard and financial stability that guide our personal bank account management. Whether we are helping you achieve your financial goals or helping the communities we serve through volunteering or our Columbia Bank Foundation, we strive to make Columbia Bank a place you can count on. Better Community Banking Starts Here.
