ENDPOINT SECURITY ENGINEER

Press Tab to Move to Skip to Content Link

Here at Metrobank, we don't simply hire employees—we hone future leaders. We provide opportunities that enhance your skills and unlock your talents, helping you evolve into a well-rounded individual. We supply you with all the pieces you need to do your best work, unleashing your full potential to help you secure your future and lead a fulfilling career. And with Metrobank's strong heart for the community, you have the chance to give back and make worthwhile contributions to our nation's economic and social development. With Metrobank, a meaningful life is within your reach

Position Title: Endpoint Security Engineer

Job Summary:

Responsible for configuring and maintaining security controls of endpoint security infrastructure; ensures that the security systems documentation is up to date. Identifies and defines endpoint system security standards and requirements. Develops and enforces security plans and standards; ensures that network and system security best practices are executed and implemented. Provides support to the Security Architect in enterprise security projects including defining configuration standards, testing and implementation. Leads the research, evaluation, and implementation of ISD security tools and small projects. Provides risk assessment support related to endpoint security and/or security controls to be architected to other information security departments. Maintains and matures the security tools to ensure effective prevention and detection of threats/incidents. Develops enterprise-level metrics for endpoint security controls. Acts as the subject matter expert on security of assigned technology domain/area, e.g., antivirus, intrusion detection/prevention, endpoints (server, workstations/laptops, ATM), operating system, database, etc.

Specific Duties & Responsibilities:

• Prepares plans to deliver/implement the security infrastructure strategy prepared by the Security Architect.
• Supports the Security Architect in enterprise security projects by defining configuration standards, security requirements, preparing test plans, and all necessary documentation for project approval and implementation.
• Designs/defines security configuration standards and formulates, reviews, and maintains IT security policies, technical standards, and internal ISD procedures related to endpoints and endpoint security technologies/solutions, e.g., intrusion detection/prevention, email security, use of portable devices, BYOD, etc.
• Develops detailed designs for implementation based on the approved IT security systems and infrastructure architecture.
• Ensures endpoint security controls and systems are securely configured, function effectively, and are maintained according to security best practices and industry standards.
• Develops enterprise-level metrics (risks and performance indicators) for endpoint security controls.
• Tests, implements, maintains, and manages endpoint security solutions that detect, prevent, and respond to security incidents.
• Provides support to ISD-Consulting and Project Services Department (CPSD) and ISD-Security, Quality Assurance, and Risk Assessment Department (SQRD), acting as the security subject matter expert related to endpoint security infrastructure and architecture. Identifies security design gaps and recommends improvements.
• Researches, analyzes, and evaluates new endpoint security technologies and cost-effective solutions, working with vendors and business units to ensure solutions support business goals.
• Prepares documentation and business cases for endpoint security projects, including hardware/software selection, implementation techniques, and capacity planning.
• Manages testing of technical controls related to endpoints and endpoint security.
• Develops and provides training/support to end-users on endpoint security solutions.
• Oversees the implementation of baseline system security standards across various legacy systems.
• Performs regular security configuration reviews to ensure control efficacy and optimal use.
• Evaluates vendor performance as part of the VPRC process.
• Reviews installation and changes to security infrastructure, assessing impacts on security posture and operations.
• Collaborates with other ISD Departments to ensure comprehensive service delivery.
• Establishes and tests disaster recovery strategies for security tools.
• Stays updated on security technology, trends, vulnerabilities, and threats; maintains high technical expertise in endpoint security.
• Supports the SAID Head in implementing continuous improvement programs for the bank’s security plans and strategies.
• Performs other security governance, risk, and compliance duties as directed.