Lead Security Engineer

The Lead Security Engineer will define the strategic roadmap for compliance validation following Enterprise Protect guidelines. This role will work primarily within projects/products and will lead project/product validation of requirements and specifications at high and low level. They will maintain respective framework/solution that supports the most efficient, reliable, scalable, and secure solutions to meet the business security needs and technology strategy; this includes planning, evaluating, recommending, and implementing of security checks in Azure, GCP, AWS, and in the CI/CD pipelines. Other duties include the below:
- Evaluate Compliance as Code implementation for assigned programs in compliance with bank standards
- Collaborate with stakeholders from across the organization in governance, infrastructure, and application teams
- Provide leadership for software developers to validate compliance with the bank's requirements
- Lead development of CI/CD pipelines within a software development environment with tools such as (GitHub, Jira, Aqua, Wiz.io, Azure Policy, GCP Org Policy)
- Recommend integrated security solutions for multiple classified information systems
- Provide systems engineering and integration support for the integration of newly developed capabilities targeted for the Test, Staging, and Operational environments
- Facilitate the development, documentation, and presentation of information system security education, awareness, and training activities for u and others, as appropriate
- Ensure system security measures comply with applicable policies, provide configuration management and accurately assess the impact of modifications and vulnerabilities for each system
- Conduct reviews and technical inspections to identify and mitigate potential security weaknesses and ensure that all security features applied to a system are implemented and functional

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to HR@insightglobal.com .

To learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/ .

Required Skills & Experience
- 8-10+ years of security engineering experience
- Knowledge of Risk Management Framework (RMF) and the implementation across multiple phases of large programs
- A comprehension of security standards and frameworks, rules, and regulations, and system trust principles, such as FedRAMP, FIPS, STIGs, NIST SP 800 Series, ISO 27001, etc.
- Experience with cloud services in Azure, GCP, or AWS
- Experience with development of CI/CD pipelines within a software development environment with tools such as GitHub, Jira, Aqua, Wiz.io, Azure Policy, GCP Org Policy, etc.
- Experience with scripting in Bash, PowerShell, or Python

Benefit packages for this role will start on the 31st day of employment and include medical, dental, and vision insurance, as well as HSA, FSA, and DCFSA account options, and 401k retirement account access with employer matching. Employees in this role are also entitled to paid sick leave and/or other paid time off as provided by applicable law.