Description

The Senior Information Security Engineer – Digital Assurance plays a crucial role in ensuring the security, integrity, and compliance of organizational digital assets and data. This role involves working with various digital trust technologies, cloud security posture management, and information security management tools. The specialist will also be involved in data governance processes, assessing and addressing potential vulnerabilities in digital assets, and contributing to a secure and compliant data environment.

This position is expected to be hybrid. 

NYC Salary Range - $95,070 - $140,000 annually; compensation is commensurate to geographic location.

• Regardless of seniority or role, uphold UNFCU’s mission, core values, and guiding principles by providing an exceptional service experience to colleagues and members alike through consistent demonstration of our service excellence behaviors.
• Collaborate with IT teams to oversee Domain Name System (DNS) configurations, ensuring reliable and secure network connections.
• Monitor and manage digital certificates (public key infrastructure), reviewing certificates signing requests, ensuring the validity of issued certificates, including expiration dates, and proper usage across systems.
• Manage encryption key management systems \ stores, including Key storage appliances.
• Implement and maintain SPF, DKIM and DMARC (Domain-based Message Authentication, Reporting, and Conformance) policies to ensure email deliverability and reputation to prevent email phishing and spoofing attacks.Manage web application firewall (WAF) configurations.
• Configure and utilize digital rights management platforms to manage online brand reputation to identify unauthorized use of UNFCU brand, marks or other digital assets and coordinate takedown or other response actions.
• UtilizeCASB (Cloud Access Security Broker) tools to identify and assess misconfigurations in cloud services and platforms.
• Analyze changes in cloud security posture and take proactive steps to remediate misconfigurations to maintain a strong security baseline.
• Collaborate with cloud teams to provide guidance on secure cloud configurations and best practices.
• Act as a key point of contact for reviewing and approving firewall rule requests.

• Bachelor's degree in Computer Science, Information Security, or related field (or equivalent experience) and 5-8 years of experience in a financial services environment supporting Digital Assurance with a progression of responsibili
• Strong understanding of cryptography, encryption and public key infrastructure
• Proficient knowledge of DNS and name space management \ registration
• Strong understanding of fundamental Information Technology databases, networks and systems
• Proficiency in using digital trust tools, cloud security management platforms, and firewall management tools
• Strong understanding of data governance principles, data protection regulations, and industry best practices
• Excellent problem-solving skills and the ability to analyze complex technical situations