Onsite in Seal Beach, CA with a role focused on strengthening the Bank’s security posture. This position supports the CISO by designing, administering, and monitoring information security controls, contributing to risk assessment and incident response, and helping improve how security activities are automated and documented.
Compensation: $102,440 – $174,200 per year (Exempt). Experience: 6+ years. Education: Bachelor’s in computer science or equivalent required.
What you’ll be doing
- Select, design, configure, administer, and monitor security controls while maintaining reliability, performance, and availability of systems.
- Support IT and Information Security risk assessment documentation by applying knowledge of risks and controls.
- Research and help develop security technologies to assess, monitor, and reduce vulnerabilities across the enterprise.
- Automate security activities and data analysis using system automation scripting and data management (Python, PowerShell; PERL may also be involved).
- Handle security and systems documentation, including activity logs, periodic reports, problem management systems, change management systems, project tracking systems, and related documentation sources.
- Document system design and configuration details with factually accurate, business-standard writing and minimal spelling, grammatical, or syntactical errors.
- Follow Change Management procedures and use sound judgment to minimize disruption to production systems.
- Perform security-related MS SQL database administration.
- Collaborate with vendors to implement security-related projects.
On-call support
When scheduled for on-call duty, you will provide all end-user support after hours and ensure response times and service levels align with management guidelines. Cell phones must be kept on and available for end-user support calls or outage alerts received via text message. The role may also require availability for critical situations even if not scheduled for on-call duty.
Compliance responsibilities
Comply with state and federal banking laws, regulations, and internal policies tied to lending, operations, and deposit requirements, including:
- Bank Secrecy Act (BSA)
- Anti-Money Laundering (AML)
- Office of Foreign Assets Control (OFAC)
- Customer Identification Program (CIP)
- Financial Elder Abuse reporting laws
- Sexual Harassment prevention policies
- Information security and privacy requirements
What you bring
- Understanding of information security concepts and domains.
- Experience administering Windows and Linux servers or network systems (Arista, Cisco, HP).
- Understanding and/or experience with security technologies such as firewalls (Fortinet), web application firewalls, IDS/IPS, and e-mail encryption gateways, plus vulnerability scanning and forensics tools.
- Exposure to log and packet capturing and decoding attack signatures, including recognizing SQL injections and cross-site scripting attacks.
- Strong understanding of Microsoft Active Directory access rights, user access provisioning, SQL access, and Operating System security.
- Working knowledge of Microsoft Azure, M365 cloud security, and InTune.
- Knowledge of Ethernet, TCP/IP, DHCP, DNS, Active Directory, and enterprise-level backup software.
- Experience with SIEM systems such as SumoLogic or Splunk.
- Effective verbal and written communication, including documenting activities, drafting reports, and presenting findings and recommendations.
- Customer service skills, time management, project planning and execution, attention to detail, and critical thinking.
- Ability to work independently and with others, communicate respectfully, and handle unpleasant or angry situations.
- Ability to actively listen and learn.
- Clear understanding of English (spoken and written).
Tools and technologies
- Python, PowerShell, PERL
- MS SQL, Windows, Linux
- Arista, Cisco, HP
- Fortinet, web application firewalls, IDS/IPS, e-mail encryption gateways
- Vulnerability scanning tools, forensics tools
- Microsoft Active Directory, Microsoft Azure, M365 cloud security, InTune
- Ethernet, TCP/IP, DHCP, DNS
- SIEM systems (SumoLogic, Splunk)
Equipment and work environment
- Work is primarily in an office environment with controlled temperature and standard office conditions.
- Operates standard electronic computers and office equipment needed to perform essential job functions.
- Must be able to sit and/or stand for extended periods, perform repetitive movements related to office and computer work, and lift/carry/move objects up to 25 pounds with or without reasonable accommodation.
Mandatory consecutive absence
Required Minimum Absence for this position is two (2) consecutive weeks each calendar year to support segregation of duties and independent review. The absence is scheduled in coordination with management, and administration of absence (paid or unpaid) will comply with applicable federal, state, and local wage and hour and leave laws, including California requirements.
Eligibility and additional notes
- Not eligible for an Officer Title.
Disclaimer: This job description describes the general nature and level of work and is not an exhaustive list. Duties and requirements may be modified as business needs and applicable law require. Nothing in this description creates a contract of employment or changes the at-will nature of employment.
