Senior IT Security Engineer

Position Summary

• Configure and maintain security systems/platforms including:
  • Endpoint Detection and Response
  • SASE/Internet Security
  • Firewall Analysis
  • Cloud Security Posture Management
  • Vulnerability Management
  • Data Security Posture Management

• Assist with firewall configuration audits and rule reviews on a scheduled basis
• Participate in vulnerability management processes to analyze risks and threats to the Bank, as well as meeting regularly with stakeholders on the Technology team responsible for patching and systems administration.
• Collaborate with internal teams to assess security standards and align to best practices and security frameworks where applicable.

• Oversee and guide the implementation of products and services required to maintain compliance with existing, new, or changing regulations and audit recommendations.

• Lead the creation and maintenance of security documentation and configuration practices.

• Automate repetitive tasks and drive efficiencies so analysts can work on more advanced tasks.
• Collaborate with IT Security Management to identify strategic opportunities to enhance the security posture of the Bank, and create efficiencies for the Security Engineering team.

• Cross-train on other core security platforms (e.g., SIEM, EDR, Email Security, IAM).

• Perform other duties as assigned.

• Knowledge Of:
  • Strong knowledge of internet security and SASE platforms (e.g., Zscaler, Netskope) and ability to manage, monitor, and maintain the system to adhere to security best practices
  • Advanced knowledge and proficiency with workstation and server operating systems (e.g., Windows, Linux, MacOS)
  • Experience integrating systems with SIEM platforms (e.g., Splunk, LogRhythm) using API, Syslog, or other log collection methods.
  • Knowledge and familiarity with configuring and managing endpoint detection and response platforms (e.g., CrowdStrike, SentinelOne)
  • Knowledge of Data Security Posture Management (DSPM) processes and tools to effectively manage and monitor the security of data.
  • Experience with Vulnerability Management and Cloud Security Poster Management tools (e.g., Rapid7, Wiz), and a strong understanding and ability to comprehend threat and vulnerability data.
  • Knowledge of application and code scanning tools (e.g., Snyk, Probely)
  • General knowledge and understanding of networking and firewall concepts, and securing traffic across LAN, WAN, and Internet infrastructure.
  • Experience in conducting risk assessments that protect the business and adhere with compliance and privacy laws.
  • Familiarity with security frameworks and standards, such as ISO27001, NIST, and CIS Controls
  • Knowledge of one or more compliance standards, including Payment Card Industry (PCI), Gramm-Leach-Bliley Act (GLBA).

• Ability to:
  • Proven trustworthiness and history of acting with integrity, taking pride in work, looking to excel, being curious and adaptable, and communicating effectively with cross functional teams.
  • Self-starter requiring minimal supervision.
  • Excellence in communicating business risk and remediation requirements from assessments.
  • Analytical and problem-solving mindset, with the ability to make judgement calls and quick decisions in complex situations.
  • Highly organized and efficient.
  • Demonstrated strategic and tactical thinking.
  • Stays current with the evolving threat landscape.

• Education and Training:
  • (Preferred) Bachelor's degree in computer science information assurance, MIS, or related field, or equivalent.
  • On-the-job training in relevant roles relating to information security, threat and vulnerability management, system administration, or equivalent.
  • Preferably, one of the following: Security+, CySA+, GSEC, CCSP, AWS Security Specialty, or similar; or willingness to pursue a certification or re-certification within the first six months of hire.
  • At least 5 years' experience in information security administration, vulnerability management, security operations, or system administration.

Benefits and Compensation

Salary offered is based on factors, including but not limited to, the job duties, required qualifications and relevant experience, and local market trends. The role may be eligible for bonus or incentives based on company and individual performance.

(Base Pay Range: $86,000 - $123,000/year)

Busey provides a competitive Total Rewards package in return for your time, talents, efforts and ultimately, results. Your personal and professional well-being-now and in the years to come-are important to us. Busey's Total Rewards include a competitive benefits package offering 401(k) match, profit sharing, employee stock purchase plan, paid time off, medical, dental, vision, company-paid life insurance and long-term disability, supplemental voluntary life insurance, short-term and long-term disability, wellness incentives and an employee assistance program. In addition, eligible associates may take advantage of pre-tax health savings accounts and flexible spending accounts. Visit Busey Total Rewards for more information.

Equal Opportunity

Busey values a diverse and inclusive workplace and strives to recruit, develop and retain individuals with exceptional talent. A team with diverse talent, working together, is essential to Busey's commitment of delivering service excellence. Busey is an Equal Opportunity Employer including Disability/Vets. Visit Busey.com/Careers to learn more about Busey's Equal Opportunity Employment.

Unsolicited Resumes

Busey Bank, and its subsidiaries, does not accept any liability for fees for resumes from recruiters or employment agencies ("Agency"), without a binding, written recruitment agreement between Busey and Agency describing the services and specific job openings ("Agreement"). Busey may consider any candidate for whom an Agency has submitted an unsolicited resume and explicitly reserves the right to hire those candidate(s) without any financial obligation to the Agency, unless an Agreement is in place. Any email or verbal contact with any Busey associate is inadequate to create a binding agreement. Agencies without an Agreement are requested not to contact any associates of Busey with recruiting inquiries or resumes. Busey respectfully requests no phone calls or emails.