Cyber Security Engineer II

<strong>Overview</strong><br><br><p style="margin: 0px 0px 10.6667px; padding: 0px; color: windowtext;"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">This is a remote opportunity that can be hired only in NC and TX. </span></span></span></p><p style="margin: 0px 0px 10.6667px; padding: 0px; color: windowtext;"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;"> </span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></p><p style="margin: 0px 0px 10.6667px; padding: 0px; color: windowtext;"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">This position ensures the technological and digital security of the Bank. The tester will </span><span style="margin: 0px; padding: 0px;">identify</span><span style="margin: 0px; padding: 0px;"> exposure to cyber threats, security risks, and unauthorized access and </span><span style="margin: 0px; padding: 0px;">assist</span><span style="margin: 0px; padding: 0px;"> with mitigation guidance. The tester will assess organizational networks, applications, or systems for potential vulnerabilities. The tester will </span><span style="margin: 0px; padding: 0px;">maintain</span><span style="margin: 0px; padding: 0px;"> knowledge of industry practices, technology, and evolving threats to enhance defenses for the Bank's information systems and resources.</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></p> <br><strong>Responsibilities</strong><br><br><p style="margin: 0px 0px 10.6667px; padding: 0px; color: windowtext;"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">The </span><span style="margin: 0px; padding: 0px; border-bottom: 1px solid transparent;">Pentester</span><span style="margin: 0px; padding: 0px;"> must be able to plan, coordinate </span><span style="margin: 0px; padding: 0px;">communicate</span><span style="margin: 0px; padding: 0px;">, track, and conduct penetration testing assessments on the organization’s applications, aid in the coordination of additional testing through third party vendors, maintains, may lead other associates in the work group acting as lead tester. The selected candidate is welcome to work remotely and/or from a corporate office location.</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></p><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Planning and conducting application penetration tests of complex computer systems from a remote testing location</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Coordinate third-party vendor testing</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="3" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Analyzing and documenting test results in the format and level of detail dictated by current procedures</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="4" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Can convey highly technical information in a manner that can be understood and appreciated by Application Owners and other stakeholders</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="5" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Track vulnerabilities and metrics</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="6" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Coordinate multiple projects/assignments simultaneously and accurately, and deliver results </span><span style="margin: 0px; padding: 0px;">in a timely manner</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="7" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Stay current on new tools, TTPs, vulnerabilities, and emerging threats</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="2" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="8" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Aid in defining and documenting Pentest Processes</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul> <br><strong>Qualifications</strong><br><br><p style="margin: 0px;"><span style="font-family: verdana, geneva; font-size: 10pt;">Bachelor's Degree and 4 years of experience in Systems Engineering, Network, or Information Security OR High School Diploma or GED and 8 years of experience in Systems Engineering, Network, or Information Security</span></p><p style="margin: 0px;"> </p><p style="margin: 0px;"><span style="font-family: verdana, geneva; font-size: 10pt;">Preferred Qualifications: </span></p><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">FCB Experience</span></span></span></li><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Expertise</span><span style="margin: 0px; padding: 0px;"> in application penetration techniques with and without scanners</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Demonstrated </span><span style="margin: 0px; padding: 0px;">expertise</span><span style="margin: 0px; padding: 0px;"> in:</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="1" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Testing web applications and databases</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="2" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Linux and Windows</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="3" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Kali Linux tools, Burp Suite, and other </span><span style="margin: 0px; padding: 0px; border-bottom: 1px solid transparent;">pentest</span><span style="margin: 0px; padding: 0px;"> tools</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="4" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Experience with </span><span style="margin: 0px; padding: 0px; border-bottom: 1px solid transparent;">pentesting</span><span style="margin: 0px; padding: 0px;"> frameworks such as OWASP and PTES</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="5" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Analysis and development of professional reports</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 72px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="o" data-font="Courier New" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":1440,"335559991":360,"469769226":"courier="" new","469769242":[9675],"469777803":"left","469777804":"o","469777815":"multilevel"}"="" data-aria-posinset="6" data-aria-level="2"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Knowledge of the Secure System Development Lifecycle</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="3" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Demonstrated ability to effectively balance and manage multiple priorities</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="4" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Proficiency</span><span style="margin: 0px; padding: 0px;"> in Microsoft Word, Excel, </span><span style="margin: 0px; padding: 0px;">PowerPoint</span><span style="margin: 0px; padding: 0px;"> and Outlook</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><ul style="margin: 0px; padding: 0px; font-family: verdana;"><li style="margin: 0px 0px 0px 24px; padding: 0px; font-size: 12pt; font-family: Aptos, Aptos_MSFontService, sans-serif;" aria-setsize="-1" data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{" 335552541":1,"335559685":720,"335559991":360,"469769226":"symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"multilevel"}"="" data-aria-posinset="5" data-aria-level="1"><span style="font-family: verdana, geneva; font-size: 10pt;"><span style="margin: 0px; padding: 0px;" data-contrast="auto"><span style="margin: 0px; padding: 0px;">Preferred but not </span><span style="margin: 0px; padding: 0px;">required</span><span style="margin: 0px; padding: 0px;">: OSWE, GPEN, GWAPT, or other equal certifications</span></span><span style="margin: 0px; padding: 0px;" data-ccp-props="{}"> </span></span></li></ul><p style="margin: 0px;"> </p><p style="margin: 0px;"><span style="font-family: verdana, geneva; font-size: 10pt;">Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.</span></p>

Back to blog