Security engineer in banking

As a Product Security Engineer within the Consumer Banking Organization, you serve as a seasoned member of a team that works to deliver software solutions that satisfy pre-defined functional and user requirements with the added dimension of preventing misuse, circumvention, and malicious behaviour. Carry out critical technology solutions with tamper-proof, audit defensible methods across multiple technical areas within various business functions in support of the firm's business objectives.

• Independently performs analysis and reports against security risks to protect data, applications, and infrastructure using modern tools
• Uses enterprise-authorized AI capabilities within the work environment to accelerate threat modelling, control review analysis, and security documentation, validating outputs and handling data according to sensitivity and security requirements.
• Conducts reviews on existing security controls with minimal oversight
• Identifies gaps in network architecture and creates detailed documentation of threats and mitigations for software applications with few to no missing security threats
• Applies reuse-first, AI-assisted patterns within SDLC/toolchain routines to improve security testing and control validation, ensuring traceability/auditability and alignment to resiliency and security expectations.
• Executes security solutions design, development, and technical troubleshooting with the ability to apply knowledge of existing security solutions to satisfy security requirements for internal clients (e.g., product, platform, application owners)
• Creates secure and high-quality production code and maintains algorithms that run synchronously with appropriate systems

• Formal training or certification on cybersecurity architecture concepts and some years of applied experience
• Experience creating cybersecurity solutions based on existing security parameters
• Working knowledge of using enterprise-authorized AI capabilities within the work environment to support cybersecurity architecture workflows with strong validation habits and awareness of data sensitivity.
• Ability to assess and validate AI-assisted security recommendations before adoption, escalating uncertainty and ensuring outcomes align to security, resiliency, and auditability expectations.
• Ability to evaluate current cybersecurity technologies to recommend ways to optimize architecture
• Hands-on practical experience in system design, application development, testing and operational stability
• Proficient in coding in languages - Go/Python
• Strong working knowledge of information and network security, IT risk management, and architectural concepts and patterns
• Knowledge of SDLC execution, including agile methods such as continuous integration/delivery, application resiliency, and security
• Demonstrated knowledge of software applications and technical processes within a technical discipline (e.g., public cloud, AI/ML, mobile, etc.), including cloud technologies

• Условий в вакансии нет