Security Engineer
BCI

Department Description

The Technology department is responsible for developing technology solutions that contribute to the achievement of BCI’s mission and long-term goals. The department manages the Corporation’s business applications and information technology infrastructure, providing support to a large group of financial professionals. The department is also responsible for authoring technology-related directives and conducting disaster recovery planning to minimize risk to the Corporation’s delivery of investment services.

General

Reporting to the Manager, Security & Risk, the Security Engineer will play a key role in developing and implementing cutting-edge security solutions in a team responsible for managing security processes, products, and projects of varying complexity. Collaborating closely with business partners in an Agile hybrid environment, the Security Engineer helps ensure the secure and efficient delivery of high-quality products.

Primary Responsibilities

Technical Security Solutions Development:

• Develop innovative solutions to production security issues & evaluate new technologies/processes.
• Define technical security requirements for new products/tools.
• Guide projects during solution design.
• Collaborate with teams to ensure secure product designs.
• Research & recommend security controls.
• Deliver/test security solutions.
• Validate/tune security testing tools.
• Monitor security solutions.
• Document designs and produce technical reports to support security initiatives.
• Ensure compliance with security standards/policies.

Security Leadership and Implementation:

• Lead and contribute to cybersecurity projects with technical expertise and passion for the field.
• Execute the zero-trust strategy, including implementing tools and best-in-class architectures.
• Implement Privileged Access Management (PAM) enhancements using cutting-edge technologies.
• Deploy Identity Governance Platform to manage user lifecycles and access privileges effectively.
• Develop and integrate cybersecurity automation to enhance response capabilities.
• Implement best-in-breed cybersecurity tools and ensure seamless integration.
• Provide feedback on features and enhancements to improve client cybersecurity posture.
• Actively participate in internal technology audits, ensuring compliance with cybersecurity best practices and standards.
• Demonstrate commitment to excellence and continuous improvement in cybersecurity practices.
• Proactively identify and propose solutions to remove barriers.
• Bridge the gap in cybersecurity knowledge and systems engineering, especially at senior levels.
• Communicate complex security issues to internal clients.