Information Security Engineer recruitment
The Senior Information Security Engineer will be responsible for the end-to-end infrastructure provisioning of services to the various STI businesses and applications in all regions.
The candidate will provide Information Security design, technical implementation and support expertise across various products and technologies (primarily network firewalls). The position is an engineering role but still requires significant hands-on expertise in evaluating and implementing technologies, maintaining and monitoring the infrastructure.
Additionally, the candidate will take a lead role in managing major information security project implementations.
STI within CTI is responsible for the provision of business aligned infrastructure and services to the Equities, Futures, Derivatives and Fixed Income business.
This role is a hands-on position involving, technology engineering, operational/service management oversight including elements of controls compliance, stability.
Responsibilities include:
- Design, implementation, and documentation of new information security solutions to support the various Citi Electronic Trading environments.
- Support and maintain the STI Firewall environment
- Design and deployment of high-performance, low-latency technology solutions
- Compliance and Controls - participate in various reporting functions, metrics analysis and vulnerability remediation initiatives
- Stability and resiliency of the infrastructure
- Change control management, coordination and process improvements between infrastructure and development/application management units
- Ownership of Infrastructure Problem, Incident and Change management
Responsible for collaborating with:
- Peers and other aligned technology team infrastructure engineers
- CTI and CATE Infrastructure Product Specialists/Managers (EMEA, NAM and APAC)
- Technology Risk Control and Audit teams
- Trading Application Development and Support teams
For purposes of:
- Implementing CATE or CTI common infrastructure requirements
- Implementing business needs as related to internal or external client requirements
- Process efficiency, consistency and standardization
- Adherence to corporate and functional standards and controls
Development Value:
The successful candidate will be exposed to and have the opportunity to gain experience and be a member of a global Infrastructure team. They will work closely with the products/businesses they support as well as other engineering teams, and where necessary formal training will be provided to build upon existing skills to increase both breadth and depth.
Skills
Knowledge/Experience:
- Project management experience
- Strong understanding of Information Security domains, and best practices
- Strong knowledge of network firewalls, IDS, VPN, and vulnerability management is required
- Strong understanding of IP networking concepts and protocols.
- Experience working in the IT field, and in the Financial services industry
- Experience of customer support in a time critical environment
- Experience designing complex security solutions
Skills:
- Strong communication (verbal and written) skills
- High work standards and high bandwidth for work.
- Proven achiever
- Standard office documentation and communication tools.
- Extensive hands-on knowledge of Juniper and Netscreen Firewalls and related tools (e.g. NSM)
- Hands-on skills in one or more of the following fields is desirable: Encryption/PKI, Scripting language (e.g. Perl, shell script, etc), Penetration testing, Remote access solutions, patch management
Qualifications:
- Education to degree level or equivalent an advantage.
- A technical certification is highly desirable (e.g. CISSP; Juniper, Checkpoint or Cisco certification, etc) Competencies
- Strong self-management, work autonomy and use of own initiative
- Must be able to multitask efficiently and provide accurate, reliable, consistent end-to-end service
- Focusing on the customer's short and long-term needs when planning and implementing projects
- Ability to remain calm and objective in a high-pressure environment
- Examples of Specific Infrastructure Product Specialist Duties Guidelines
- Proactively identify and drive infrastructure issues and outages to resolution
- Develop an in depth knowledge of the applications and various STI infrastructure environments globally
- Collaborate with Infrastructure Architects on builds, standards, efficiencies and automation
- Work with the business and application development teams to initiate and own new projects
-
Exceptional candidates who do not meet these criteria may be considered for the role provided they have the necessary skills and experience.
Competencies:
Valuing Diversity:
Demonstrates an appreciation of a diverse workforce. Appreciates differences in style or perspective and uses differences to add value to decisions or actions and organizational success.