Configuration Assurance Engineer II

The Configuration Assurance Engineer II position is an individual contributor role on the Enterprise Security Architecture team, aligned to the Bank's Secure Configuration Management program. The Engineer will be responsible for ensuring the Bank's core technologies are consistently and securely configured; and that drift from these configurations is identified, tracked, and remediated in a timely manner.

The ideal candidate will possess a deep technical understanding of fundamental security principles, but also commonly used operating systems, database platforms, and/or cloud service providers. In addition, the candidate will employ a proactive, preventative, and collaborative mindset to partner with technology teams, converge on "the right" configurations, and ensure risk-oriented action.

This is a remote role that may be hired in several markets across the United States.

**Remote with ability to travel to Raleigh, North Carolina, Phoenix, Arizona or Morristown, New Jersey, on an as needed basis.

• Serve as a technical subject matter expert for secure configuration management across enterprise platforms, including servers, endpoints, cloud, and supporting infrastructure.
• In partnership with technology owners, define secure configuration baselines in alignment with Industry best practices, the threat landscape, operational realities/constraints, and the Bank's risk appetite.
• When tailoring is thought necessary, tactfully challenge the need through technical risk assessment, evaluation of alternative and/or compensating controls, and providing recommendation(s).
• Administer, configure, and tune automated compliance tools to validate secure configuration controls, ensure accurate coverage, and reduce false positives.
• Configure and maintain secure configuration policies within automated compliance tools, including mapping controls to internal standards and industry benchmarks.
• Identify, assess, and remediate realized or looming systemic issues across the span of the program (e.g., fidelity of reporting; false positives) to include the open-exchange of forwards-looking perspectives on tactical and strategic opportunities.

• Bachelors Degree and 4 years of experience in Cyber Security or Technology engineering OR High School Diploma or GED and 8 years of experience in Cyber Security or Technology engineering.

• Strong knowledge of core OS and DB technology platforms - demonstrable experience in hardening said technologies in an Enterprise environment.

• Demonstrated ability to pressure-test disabled or deviated configuration controls, assess security impact, and evaluate compensating controls

• Hands-on experience administering and tuning automated compliance scanning tools, including configuration policy setup, scan validation, and results analysis.

• Experience validating secure configuration remediation through technical evidence review.

• Working knowledge of scripting tools to support validation, troubleshooting, and automation.

• Excellent communication and documentation skills.

• Ability to work collaboratively with technical and non-technical stakeholders.

Preferred:

• 6+ years of experience supporting secure configuration management, system hardening, or security control validation.

• Experience working in the banking or financial services industry is a plus.

• Certifications such as Security+, SSCP, CISA, CISM, CISSP, CRISC.

• Knowledge of issue tracking and reporting tools like Jira or Confluence.

The base pay for this position is generally between $105,000 and $160,000. Actual starting base pay will be determined based on skills, experience, location, and other non-discriminatory factors permitted by law. For some roles, total compensation may also include variable incentives, bonuses, benefits, and/or other awards as outlined in the offer of employment.

This job posting is expected to remain active for 45 days from the initial posting date listed above. If it is necessary to extend this deadline, the posting will remain active as appropriate. Job postings may come down early due to business need or a high volume of applicants

Benefits are an integral part of total rewards and First Citizens Bank is committed to providing a competitive, thoughtfully designed and quality benefits program to meet the needs of our associates. More information can be found at https://jobs.firstcitizens.com/benefits.