Endpoint Security Engineer

Responsible for configuring and maintaining security controls of endpoint security infrastructure; ensures that the security systems documentation is up to date. Identifies and defines endpoint system security standards and requirements. Develops and enforces security plans and standards; ensures that network and system security best practices are executed and implemented.

Provide support to the Security Architect in enterprise security projects including defining configuration standards, testing and implementation. Leads the research, evaluation and implementation of ISD security tools and small projects. Provides risk assessment support related to endpoint security and/or security controls to be architected to other information security departments.

Maintains and matures the security tools to ensure effective prevention and detection of threats/incidents. Develops enterprise level metrics for endpoint security controls. Act as the subject matter expert on security of assigned technology domain/area, i.e., antivirus, intrusion detection/prevention, endpoints (server, workstations/laptops, ATM), operating system, database, etc.

Specific Duties & Responsibilities:Prepares the plans to deliver/implement the security infrastructure strategy prepared by the Security Architect. Provides support to the Security Architect in enterprise security projects by defining configuration standards, security requirements, preparing test plans and all the necessary documentation for project approval and implementation. Designs/defines security configuration standards as well as formulates, reviews and maintains IT security policies, technical standards, internal ISD procedures including guidelines related to endpoints and endpoint security technologies/solutions, i.e., intrusion detection/prevention, email security, use of portable devices, BYOD, etc.

Develops detailed designs for implementation based on the approved IT security systems and infrastructure architecture. Ensures that endpoint security controls and systems are securely configured, function effectively and efficiently, and are maintained in accordance with security best practices and industry standards. Develops enterprise level metrics (risks and performance indicators) for endpoint security controls.

Tests, implements, maintains and manages endpoint security solutions that detect, prevent, and respond to security incidents. Provides support to ISD-Consulting and Project Services Department (CPSD) and ISD-Security, Quality Assurance and Risk Assessment Department (SQRD), serving as the security subject matter expert related to endpoint security infrastructure and architecture. Identifies security design gaps in existing and proposed architectures and recommends changes or enhancements.

Researches, analyzes and evaluates new endpoint security technology and cost-effective solutions and makes recommendations for implementation. Whenever necessary, works with vendors and business units to ensure solutions/capabilities/enhancements support business goals and objectives. Prepares all the necessary documentation in presenting and having the business case for endpoint security projects approved.

Provides specific, detailed information for hardware/software selection, implementation techniques and tools for the most efficient solution including present and future capacity requirements. Manages the testing of technical controls related to endpoints and endpoint security. Develops/Provides training/support to end-users on how to use endpoint security solutions effectively.

Oversees/Manages the implementation of baseline system security standards for various legacy systems. Performs regular security configuration reviews, ensuring efficacy of controls and optimization of use. Reviews and/or evaluates vendor performance as part of the VPRC process.

Reviews installation and changes to security infrastructure, i.e., firewall, VPN, routers, IDS technologies, servers and network devices and assesses impact to security posture and operations. Collaborates and coordinates with other ISD Departments to ensure that holistic ISD service is provided to internal customers. Establishes disaster recovery strategy of security tools implemented and ensures it is regularly tested for effectiveness.

Stays up to date on the latest security technology, trends, vulnerabilities and threats; maintains a high level of technical expertise in the field of endpoint security. Proactively works with the SAID Head in implementing programs for the continuous improvement of the bank's information security plans and strategies. Performs other information security governance, risk and compliance related duties and responsibilities as directed by the SAID Head.