Senior Security Engineer

POSITION: Senior Security Engineer 

DEPARTMENT: Information Technology

FLSA: Exempt

REPORTS TO: Director, IT Security

LOCATION: Reston/Hybrid

SUMMARY OF POSITION

The Senior Security Engineer is responsible for securing enterprise information at the Office of Finance (OF) by determining security requirements; planning, implementing, and testing security systems; preparing security standards, policies, and procedures; and mentoring team members. Additionally, this position is responsible for identifying potential threats to the IT infrastructure and recommending enterprise security enhancements. The Senior Security Engineer will work on project teams as a technical expert and deliver quality products according to project timelines and budgets. This position serves a crucial role in support of the OF’s mission critical areas of debt issuance, debt servicing, and combined financial reporting, which depend on the accuracy and the availability of the security systems for the successful operation of the OF. We’re proud of the way our teammates have a positive impact on everything we do. Our employees are committed to and exemplify our Core Values:

• Integrity through accountability, consistency, transparency, and trust

• Agility through adaptability, continuous improvement, expertise, and flexibility

• Partnership through collaboration, communication, leadership, and teamwork

• Inclusivity through diversity, relationships, respect, and support

PRINCIPAL RESPONSIBILITIES

• Conduct system security, vulnerability analyses, and risk assessments; identify integration issues.

• Use technical knowledge of current attacks to identify flaws and weaknesses in the composition and design of networks, remote access schemes, systems, and applications to specify solutions, verify the solutions that have been implemented, and rapidly adjust designs based on new threat and attack information as acquired.

• Provide subject matter expertise on vulnerability risk, remediation, and mitigating actions; partner with System Engineers, Application Development teams, and Architects in remediating the vulnerabilities.

• Provide engineering support, troubleshooting, and evaluation of preventative and detective security technologies such as: o Malware detection, web/email content filtering, file integrity monitoring, and vulnerability management.

• Maintain security posture by monitoring and ensuring IT Security compliance to standards, policies, and procedures.

• Generate and document operational processes, procedures, and incident response plans where necessary.

• Support the OF’s diversity and inclusion strategy by following policies and procedures that ensure opportunities for employees and diverse business partners.

• Assist with other job duties as assigned.

PRINCIPAL JOB REQUIREMENTS

• Minimum 6 years of experience in working with Vulnerability Management technologies.

• Minimum 6 years of experience in assisting with Enterprise Vulnerability Management Program.

• Ability to identify known vulnerabilities and configuration baseline standard deviations in OF’s environment by operating the vulnerability management platform.

• Experience with performing risk assessment of vulnerabilities by correlating asset/vulnerability data from various sources.

• Advanced knowledge of malware, emerging threats, attacks, and vulnerability management.

• Experience designing, deploying, configuring, supporting, troubleshooting, debugging, and administering Cyber Security Products (Vulnerability Management tools, File Integrity Monitor, Web Proxy, Intrusion Detection Systems/Intrusion Prevention Systems, etc.).

• Thorough understanding of network protocols such as TCP/IP and web protocols (HTTP/HTTPS).

• Working knowledge of change management technologies.

• Fundamental knowledge of different operating systems (LINUX, Windows, etc.).

• Ability to initiate and complete assignments accurately and on time, with minimal supervision.

• Ability to work effectively with vendor technical support channels.

• Working knowledge of data security controls, protocols, and methods.

• Strong written and oral communication skills.

• Ability to effectively lead and influence others without direct managerial authority within an inclusive work environment, using collaboration, coordination, and self-motivation.

• Ability to listen and integrate ideas from diverse groups of individuals, build and maintain respectful relationships, collaborate with others, and resolve conflicts constructively.

• Bachelor’s degree in related field preferred.

• Experience supporting IT service delivery in a highly-regulated and audited environment preferred.

• Proof of eligibility to work in the United States.

EQUAL EMPLOYMENT OPPORTUNITY

The Federal Home Loan Banks Office of Finance is committed to equal employment opportunity without regard to race (including traits historically associated with race, such as hair texture, hair type and protective hairstyles), color, religion, sex, pregnancy (including childbirth, lactation, and related medical conditions), national origin or ancestry, age, physical or mental disability, veteran status, uniformed service member status, military status, sexual orientation, gender identity, status as a parent, marital status, genetic information (including testing and characteristics), citizenship status, or any other characteristic protected by applicable federal, state, or local law.