information engineer

IT Vikings

<div><div><div>ITVikings</div><div>
Careers</div><div>
Cyber Security, Infosec Engineer</div><div><br>
</div></div><div><div><div><div><div><div><div><div><div>Job Description:<br>
<ul><li>Installation, configuration and maintenance for network Security equipment (Web Security, Mail Security, End point Security, Data Security, etc&hellip;.) for IT Vikings customers.</li><li>Provides remote and on-site support to our customers.</li><li>Performing troubleshooting and root cause analysis on security appliances, Network appliances.</li><li>Prepare and perform Proof-of-Concept (POC) for the customer.</li><li>Understand the customer&rsquo;s technical requirements, business objectives and strategy.</li><li>Deep knowledge to translate customer needs to a solution and designing.</li><li>Develop project documentation.</li></ul>
<br>
*Requirements*:<br>
<ul><li>BSc. In Engineering or computer science or information security</li><li>2+ years practical experience working with security solutions services</li><li>Excellent in multiple security solutions and prefer to have knowledge in NGFW , EPP , EDR , NDR,IPS, Email Security, Web Security, WAF,ADC,PAM and IAM&hellip;. etc. (implementation and operation )</li><li>Security &ndash; related certificates are plus</li><li>Strong presentation and communication skills</li><li>Very good in English</li></ul></div><p><br>
&ndash; If interested, you can send your updated resume to jobs@itvikings.com. <b>Please mention the job title in the subject</b>.</p></div></div></div></div></div></div></div></div></div><div></div>

Information Security Engineer

Truist

<div><p><b>The position is described below. If you want to apply, click the Apply Now button at the top or bottom of this page. After you click Apply Now and complete your application, you'll be invited to create a profile, which will let you see your application status and any communications. If you already have a profile with us, you can log in to check status.</b></p><p></p><p>
Need Help?</p><p></p><p><i>
If you have a disability and need assistance with the application, you can request a reasonable accommodation. Send an email to </i><i>Accessibility</i><i> (accommodation requests only; other inquiries won't receive a response).</i></p><p></p><p><b>
Regular or Temporary:</b></p>
Regular<p></p><p><b>
Language Fluency: </b>English (Required)</p><p></p><p><b>
Work Shift:</b></p>
1st shift (United States of America)<p></p><h3 class="jobSectionHeader"><b>
Please review the following job description:</b></h3><p></p>
***This position is office-centric 5 days a week in either our Atlanta or Charlotte Office***<br>
<br>
For this opportunity: Truist will not sponsor an applicant for work visa status or employment authorization, nor will we offer any immigration-related support for this position (including, but not limited to H-1B, F-1 OPT, F-1 STEM OPT, F-1 CPT, J-1, TN-1 or TN-2, E-3, O-1, or future sponsorship for U.S. lawful permanent residence status.)<br>
<br>
Produces reports utilizing databases and applications to provide information to business leaders. Reports may be in the form of standardized dashboards or customized views of data upon request. Ensures data pulled is consistent with business needs/requests.<p></p><p><b>
ESSENTIAL DUTIES AND RESPONSIBILITIES</b><br>
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.</p><ul><li><p>
Applies knowledge of the business to customize reports and deliver meaningful information. Reviews reports to identify data integrity issues and provides feedback to application/database administrators to ensure any issues are addressed. Answers questions from end-users of reports to provide additional context. Reporting may be focused on regulatory matters, operational metrics, and productivity metrics.</p></li><li><p>
Applies foundational knowledge to develop, optimize and maintain reports and dashboards. Analyzes information to recommend solutions to solve problems.</p></li><li><p>
Analyzes information to determine business needs from requests and implement effective technical solutions by providing problem analysis and resolution in a timely manner and explain and interpret complex, difficult, or sensitive information.</p></li><li><p>
Leads small projects and plays significant role in larger, more complex initiatives.</p></li></ul><p><b><br>
Required Qualifications:</b><br>
The requirements listed below are representative of the knowledge, skill and/or ability required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.</p><ul><li><p>
Bachelor's degree or equivalent and five years of related experience or an equivalent combination of education and experience.</p></li><li><p>
Foundational understanding of applicable principles, practices, theories, and/or methodologies (e.g., information technology, project management, finance, risk management, etc.)</p></li><li><p>
Specialized knowledge of SQL, relational databases, ETL/ELT architecture and concepts, data integration concepts, big data concepts and reporting tools</p></li><li><p>
Previous experience in managing and planning projects. Effective verbal and written communication to provide information to others</p></li></ul><p></p><p><b>
Preferred Qualifications:</b></p><ul><li><p>
Bachelor's degree and six years of related experience</p></li><li><p>
3 years of banking or financial services experience.</p></li><li><p>
Experience enabling cloud data platforms (Snowflake/ AWS S3)</p></li><li><p>
Experience working with Data Engineering tools (Talend, Ab Initio, Atccama, alation etc.)</p></li><li><p>
Experience working with BI tools (Qlik Sense, PowerBI, Sigma Computing, Tableau, SAS, etc.)</p></li><li><p>
Experience leading and managing large enterprise Initiatives.</p></li></ul><p><b><br>
OTHER JOB REQUIREMENTS / WORKING CONDITIONS</b></p><p><b>
Sitting</b><br>
Constantly (More than 50% of the time)<br>
<b>Visual / Audio / Speaking</b><br>
Able to access and interpret client information received from the computer and able to hear and speak with individuals in person and on the phone.<br>
<b>Manual Dexterity / Keyboarding</b><br>
Able to work standard office equipment, including PC keyboard and mouse, copy/fax machines, and printers.<br>
<b>Availability</b><br>
Able to work all hours scheduled, including overtime as directed by manager/supervisor and required by business need.<br>
<b>Travel</b><br>
Minimal and up to 10%</p><p></p><p><b>
General Description of Available Benefits for Eligible Employees of Truist Financial Corporation: </b>All regular teammates (not temporary or contingent workers) working 20 hours or more per week are eligible for benefits, though eligibility for specific benefits may be determined by the division of Truist offering the position. Truist offers medical, dental, vision, life insurance, disability, accidental death and dismemberment, tax-preferred savings accounts, and a 401k plan to teammates. Teammates also receive no less than 10 days of vacation (prorated based on date of hire and by full-time or part-time status) during their first year of employment, along with 10 sick days (also prorated), and paid holidays. For more details on Truist&rsquo;s generous benefit plans, please visit our Benefits site. Depending on the position and division, this job may also be eligible for Truist&rsquo;s defined benefit pension plan, restricted stock units, and/or a deferred compensation plan. As you advance through the hiring process, you will also learn more about the specific benefits available for any non-temporary position for which you apply, based on full-time or part-time status, position, and division of work.</p><p></p><p><b><i>
Truist is an Equal Opportunity Employer that does not discriminate on the basis of race, gender, color, religion, citizenship or national origin, age, sexual orientation, gender identity, disability, veteran status, or other classification protected by law. Truist is a Drug Free Workplace.</i></b></p><p></p><p>
EEO is the Law E-Verify IER Right to Work</p></div>

Information Engineer (ETL LEAD w/ Pipeline Management/ Data Analysis)

<div><h3 class="jobSectionHeader"><b>About the job</b></h3>
<p>
The Information Security Engineer is responsible for designing, implementing, and maintaining security controls across the organization's cloud, identity, endpoint, and network environments. This role focuses on engineering secure configurations, building automation, integrating security tooling, and ensuring the ongoing protection of systems and data.</p>
<p>
The Information Security Engineer works closely with the IT &amp; InfoSec Helpdesk, Infrastructure teams, and Development teams to architect secure solutions, conduct security assessments, and implement governance frameworks aligned to ISO 27001 and internal InfoSec policies. This role also supports complex incident response activities, assists in root-cause analysis, and ensures controls are implemented following secure-by-design principles.</p>
<p><b>
The shift for this positions is 08.00 - 17.00 CET/CEST with Saturday &amp; Sunday off.</b></p>
<h3 class="jobSectionHeader"><b>
Responsibilities</b></h3>
<p><b>
Security Engineering &amp; Control Implementation:</b></p>
<ul>
<li>Design, implement, and maintain security controls across Azure, Entra ID, Microsoft 365, network, and endpoint environments.</li>
<li>Develop and maintain secure configurations, baselines, and policy frameworks using Azure Policy, Intune compliance, and conditional access.</li>
<li>Integrate and optimize security tools including Microsoft Defender suite, SIEM/SOAR platforms, cloud security posture management, and identity governance systems.</li>
</ul>
<p><b>Cloud &amp; Infrastructure Security Architecture:</b></p>
<ul>
<li>Support the design and review of cloud architectures, including secure VNet design, firewalls/NSGs, Private Link, and hybrid connectivity.</li>
<li>Implement key cloud security protections such as encryption, identity governance, privileged access control, and secure automation frameworks.</li>
<li>Partner with Cloud Engineers to codify security controls using Infrastructure-as-Code (IaC).</li>
</ul>
<p><b>Identity &amp; Acess Security (Entra ID &amp; M365):</b></p>
<ul>
<li>Implement and manage identity governance: MFA, Conditional Access, PIM, RBAC, role lifecycle automation.</li>
<li>Review, assess, and refine authentication and access control configurations.</li>
<li>Conduct periodic privileged access audits and align identity practices with Zero Trust principles.</li>
</ul>
<p><b>Security Monitoring &amp; Threat Engineering:</b></p>
<ul>
<li>Tune and enhance SIEM/Sentinel detections, automation, and response playbooks.</li>
<li>Develop KQL detection queries aligned to threat behaviours and emerging attack patterns.</li>
<li>Improve signal fidelity across Defender platforms and integrate new data sources</li>
</ul>
<p><b>Incident Response &amp; Digital Forensics Support:</b></p>
<ul>
<li>Serve as technical escalation during high-severity incidents.</li>
<li>Perform deep-dive investigations into identity compromise, cloud misconfigurations, lateral movement, and high-risk endpoint activity.</li>
<li>Provide forensic artefact analysis support (logs, file metadata, registry data, process analysis).</li>
<li>Implement long-term remediation items and drive post-incident improvements.</li>
</ul>
<p><b>Vulnerability &amp; Risk Management</b></p>
<ul>
<li>Support vulnerability assessment programs across cloud, endpoints, and SaaS platforms.</li>
<li><ul><li>Validate remediation efforts with system owners and ensure alignment to risk thresholds.</li></ul></li>
<li><ul><li>Interpret vulnerabilities based on severity, real-world exploitability, and exposure in Microsoft, cloud, and identity stacks.</li></ul></li>
</ul>
<p><b>Compliance, Governance &amp; ISO 27001 Alignment</b></p>
<ul>
<li>Implement and maintain controls aligned with ISO 27001:2022 requirements.</li>
<li>Support evidence collection, audit preparation, and remediation of nonconformities.</li>
<li>Maintain accurate documentation including policies, baselines, runbooks, and reference diagrams.</li>
</ul>
<p><b>Automation, Scripting &amp; Continuous Improvement</b></p>
<ul>
<li>Build and maintain automation using PowerShell, Azure CLI, Logic Apps, and Functions.</li>
<li>Automate user lifecycle, security state validation, incident containment tasks, and compliance reporting.</li>
<li>Continuously identify opportunities to strengthen security posture through modernization, simplification, and automation.</li>
</ul>
<p><b>Collaboration &amp; Knowledge Leadership</b></p>
<ul>
<li>Work closely with Cloud, IT Support, Development, and Compliance teams to embed security into operational and architectural decision-making.</li>
<li>Mentor InfoSec Analysts and provide guidance on investigation techniques, threat identification, and control operation.</li>
<li>Deliver internal training, knowledge-transfer sessions, and documentation.</li>
</ul>
<p><b>Ticket Resolution &amp; Request Fulfilment</b></p>
<ul>
<li>Respond to and resolve incidents and requests within the agreed SLAs.</li>
<li>Handle user and complex incidents across Azure, AVD, and M365; drive quick MTTR and reduce ticket reopens via robust post-resolution notes and KB updates.</li>
<li>Fulfil service requests (e.g., resource provisioning, AVD image updates, M365 security baselines, conditional access adjustments).</li>
<li>Problem management: identify recurring issues, perform root-cause analysis, raise Problem records, and propose corrective/preventive actions.</li>
<li>Escalation management: engage vendor support only after thorough triage and data collection (logs, timelines, impacted scope).</li>
</ul><h3 class="jobSectionHeader"><b>About You</b></h3>
<p><b>
Required Experience</b></p>
<ul>
<li>4+ years of experience in information security engineering, cloud security, or infrastructure security roles.</li>
<li>Hands-on experience implementing security controls in Azure and Microsoft 365 ecosystems.</li>
<li>Experience with Defender for Endpoint, Defender for Cloud, Defender for Identity, and Sentinel.</li>
<li>Experience with secure cloud networking, identity governance, and Zero Trust principles.</li>
<li>Experience supporting complex incident response investigations.</li>
<li>Familiarity with ITIL processes (incident, change, problem).</li>
<li>Understanding of security frameworks (i.e. ISO 27001:2022) and data privacy regulations (i.e. GDPR).</li>
</ul>
<p><b>Technical Skills</b></p>
<ul>
<li>Azure security architecture, governance, and configuration.</li>
<li>Advanced Entra ID identity governance and access control.</li>
<li>Endpoint and cloud threat detection (Defender suite).</li>
<li>SIEM/SOAR engineering (Sentinel, Logic Apps).</li>
<li>PowerShell, automation, and API integration.</li>
<li>KQL, log analysis, and detection engineering.</li>
<li>Infrastructure-as-Code familiarity (Bicep/ARM/Terraform).</li>
<li>Secure network design, segmentation, and encryption practices.</li>
</ul>
<p><b>Soft skills</b></p>
<ul>
<li>Customer focused: prioritizing the needs and satisfaction of users and clients in every interaction.</li>
<li>Communication: effective communication skills to collaborate with cross-functional teams, management, and external stakeholders.</li>
<li>Collaborative: working effectively with cross-functional teams to achieve common goals.</li>
<li>Innovative: consistently seeking new ideas and approaches to solve problems and improve processes.</li>
<li>Problem-solving: analytical mindset to identify gaps and recommend solutions.</li>
<li>Adaptability: the infrastructure, security, and client landscape evolve rapidly, so adaptability is crucial.</li>
</ul>
<p>The following qualifications are mandatory:</p>
<ul>
<li>CompTIA Security+ or similar (i.e. ISC2 Certified in Cybersecurity)</li>
<li>SC-300: Identity &amp; Access Administrator</li>
</ul>
<p>The following qualifications would be advantageous:</p>
<ul>
<li>AZ-500: Azure Security Engineer</li>
<li>SC-200: Security Operations Analyst</li>
<li>ISO 27001: 2022 Foundations</li>
</ul><h3 class="jobSectionHeader"><b>We </b><b>offer</b></h3>
<ul><li>The flexibility to work 100% remotely with no wasted commute time and travel costs.</li>
<li>A position at a fast-paced international company with ambitious gaming, e-commerce, and tech clients.</li>
<li>A diverse and inclusive culture with people from 80+ countries, speaking 25+ languages - where we celebrate everyone's uniqueness.</li>
<li>Innovative digital tools, and continuous opportunities for learning and development.</li>
<li>Access to Udemy Business for learning and development.</li>
<li>Fun employee engagement activities and participation in 5CA employee-lead communities such as 5CA Connect, Pride, 5CA Gamers, Women of 5CA, to name a few.</li>
<li>Location-specific benefits</li></ul></div><p></p>

Information Security Engineer [Remote]

Wells Fargo

<div><b>About this role:</b><br>
<br>
Wells Fargo is seeking a Information Security Engineer<br>
<br>
<b>In this role, you will:</b><ul><li>
Participate in security consulting on small projects for internal clients to ensure uniformity with corporate information, security policy, and standards</li><li>
Track or remediate vulnerabilities and security issues</li><li>
Review and correlate security logs</li><li>
Assist with the design, documentation, testing, maintenance, and troubleshooting of security solutions related to networking, cryptography, cloud, authentication and directory services, email, internet, applications, and endpoint security</li><li>
Provide technical support for security related issues</li><li>
Utilize industry leading security solutions and best practices to implement one or more components of information security such as availability, integrity, confidentiality, risk management, threat identification, modeling, monitoring, incident response, access management, and business continuity</li><li>
Collaborate and consult with peers, colleagues and managers to resolve issues and achieve goals</li><li>
Interface with more experienced technologists</li></ul><b>
Required Qualifications:</b><ul><li>
2+ years of Information Security Engineering experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education</li></ul><b>
Desired Qualifications:</b><ul><li>
Experience with COTS SaaS applications</li><li>
Experience in building, updating and maintaining VMs and OCP clusters</li><li>
Testing experience of version updates from vendor</li></ul><b>
Job Expectations:
</b><ul><li>In office work required 3x weekly</li></ul>
No visa transfer/sponsorship<br>
<br>
No C2C<br>
<br>
<b>Posting End Date:</b>
<br>
14 May 2026<br>
<b>*Job posting may come down early due to volume of applicants.</b>
<br>
<br>
<b>We Value Equal Opportunity</b><br>
<br>
Wells Fargo is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, status as a protected veteran, or any other legally protected characteristic.<br>
<br>
Employees support our focus on building strong customer relationships balanced with a strong risk mitigating and compliance-driven culture which firmly establishes those disciplines as critical to the success of our customers and company. They are accountable for execution of all applicable risk programs (Credit, Market, Financial Crimes, Operational, Regulatory Compliance), which includes effectively following and adhering to applicable Wells Fargo policies and procedures, appropriately fulfilling risk and compliance obligations, timely and effective escalation and remediation of issues, and making sound risk decisions. There is emphasis on proactive monitoring, governance, risk identification and escalation, as well as making sound risk decisions commensurate with the business unit's risk appetite and all risk and compliance program requirements.<br>
<br>
Candidates applying to job openings posted in Canada: Applications for employment are encouraged from all qualified candidates, including women, persons with disabilities, aboriginal peoples and visible minorities. Accommodation for applicants with disabilities is available upon request in connection with the recruitment process.<br>
<br>
<b>Applicants with Disabilities</b><br>
<br>
To request a medical accommodation during the application or interview process, visit Disability Inclusion at Wells Fargo .<br>
<br>
<b>Drug and Alcohol Policy</b><br>
<br>
Wells Fargo maintains a drug free workplace. Please see our Drug and Alcohol Policy to learn more.<br>
<br>
<b>Wells Fargo Recruitment and Hiring Requirements:</b><br>
<br>
a. Third-Party recordings are prohibited unless authorized by Wells Fargo.<br>
<br>
b. Wells Fargo requires you to directly represent your own experiences during the recruiting and hiring process.</div>

Information Security Engineer - Cyber

Gainwell Technologies LLC

<div><p>Be part of a team that unleashes the power of leading-edge technologies to help improve the health and well-being of those most vulnerable in our country and communities. Working at Gainwell carries its rewards. You&rsquo;ll have an incredible opportunity to grow your career in a company that values work flexibility, learning, and career development. You&rsquo;ll add to your technical credentials and certifications while enjoying a generous, flexible vacation policy and educational assistance. We also have comprehensive leadership and technical development academies to help build your skills and capabilities.</p><p></p><div><div><div><h2 class="jobSectionHeader"><b><br>
Summary</b></h2></div><div><p>
Conduct scans (agent/network), analyze results (CVEs, CVSS), identify systemic issues, and perform risk assessments for complex environments (cloud, mobile, DB, OS). Define VM policies, improve posture, guide remediation, lead risk reduction initiatives, and serve as the subject matter expert for complex security vulnerability challenges. Drive remediation at scale across cloud, containers, endpoints, apps, and third parties. Navigates the enterprise for false positives and compensating controls.</p></div></div><div><div><h2 class="jobSectionHeader"><b>
Your role in our mission</b></h2></div><div><ul><li>
Develops reports, dashboards, and alerts to automate tasks (Python, PowerShell), and track metrics.</li><li>
Works with IT Operations, SOC, GRC, Third-Party vendors and leadership to align vulnerability management with broader security, manage compliance, and brief leadership.</li><li>
Monitor threat landscape, analyze new vulnerabilities (NVD, MITRE), and provide proactive guidance.</li><li>
Identifies security risks, threats and vulnerabilities of networks, systems, applications and new technology initiatives. Develops, tests and operates firewalls, intrusion detection systems, enterprise anti-virus systems and software deployment tools.</li><li>
Provides complex engineering analysis and support for firewalls, routers, networks and operating systems. Performs and evaluates vulnerability scans within a multi-platform, large enterprise environment. Reacts to and initiates corrective action regarding security violations, attempts to gain unauthorized access, virus infections that may affect the network or other event affecting security.</li><li>
Oversees user access process to ensure operational integrity of the system. Enforces the information security configuration and maintains system for issuing, protecting, changing and revoking passwords.</li><li>
Develops technical and programmatic assessments, evaluates engineering and integration initiatives and provides technical support to assess security policies, standards and guidelines. Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.</li><li>
Performs complex product evaluations, recommends and implements products/services for network security. Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.</li><li>
Reviews, recommends and oversees the installation, modification or replacement of hardware or software components and any configuration change(s) that affects security.</li><li>
Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures at server sites. Ensures system support personnel receive/maintain security awareness and training.</li><li>
Assesses the impact on the business unit/customer caused by theft, destruction, alteration or denial of access to information and reports to senior management.</li><li>
Provides leadership and work guidance to less experienced personnel.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What we're looking for</b></h2></div><div><ul><li>
Experience working with vulnerability management/infosec (or equivalent experience).</li><li>
Expert Knowledge with scanners (Tenable, Qualys, Rapid7).</li><li>
Proficiency with authenticated scanning, agent vs network scanning, discovery, segmentation constraints.</li><li>
Proficiency with CSPM.</li><li>
Knowledge of OS (Win/Linux/macOS), cloud security, databases, and networking.</li><li>
Proficiency with CVE, CVSS, MITRE ATT&amp;CK, FISMA, CISA directives.</li><li>
Strong risk analysis, root cause identification, and data analysis.</li><li>
Excellent communication, leadership, and ability to explain complex risks to diverse audiences.</li></ul></div></div><div><div><h2 class="jobSectionHeader"><b>
What you should expect in this role</b></h2></div><div><ul><li>
Remote position (US only)</li><li>
Opportunities to travel through your work (0-10%)</li><li>
Video cameras must be used during all interviews, as well as during the initial week of orientation</li><li>
The deadline to submit applications for this posting is 5/30/2026</li></ul></div></div></div><p></p><p><br>
The pay range for this position is $95,100 - $135,800 per year, however, the base pay offered may vary depending on geographic region, internal equity, job-related knowledge, skills, and experience among other factors. Put your passion to work at Gainwell. You&rsquo;ll have the opportunity to grow your career in a company that values work flexibility, learning, and career development. All salaried, full-time candidates are eligible for our generous, flexible vacation policy, a 401(k) employer match, comprehensive health benefits, and educational assistance. We also have a variety of leadership and technical development academies to help build your skills and capabilities.</p><p></p><p><br>
We believe nothing is impossible when you bring together people who care deeply about making healthcare work better for everyone. Build your career with Gainwell, an industry leader. You&rsquo;ll be joining a company where collaboration, innovation, and inclusion fuel our growth. Learn more about Gainwell at our company website and visit our Careers site for all available job role openings.</p><p></p><p><i><br>
Gainwell Technologies </i><i>is an Equal Opportunity Employer, where all qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, gender (including pregnancy, childbirth, or related medical condition), age, sexual orientation, status as a protected veteran, status as an individual with a disability, or other applicable legally protected characteristics.</i></p></div>

Experienced, Information Security Engineer

Fifth Third Bank

<div><p><b>Make banking a Fifth Third better&reg;
</b><br>
We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.
</p><p></p><p>The Lead Information Security Engineer on the Enterprise Vulnerability Management (EVM) Remediation team will support the continuous vulnerability remediation process and reduce the Fifth Third Bank&rsquo;s attack surface across infrastructure, endpoints, and applications on prem and in cloud environments.
</p><p></p><p>The ideal candidate excels at deep investigative analysis into complex problems to identify risks and gaps before they can be exploited. They bring strong expertise across the full Vulnerability Management Lifecycle, including asset discovery, internal and external scanning, contextual and risk-based analysis, CVE triage, reporting, and remediation.
</p><p></p><p>The position requires a solid foundation in security, with demonstrated broad prior experience in foundational roles such as help desk, system administration, networking, SOC operations, &amp; software engineering.
</p><p></p><p>The successful candidate will play a key role in maintaining a strong security posture through close collaboration with infrastructure, development, product, and other teams across Fifth Third Bank to embed security from design through deployment and into ongoing operations.
</p><p></p><p><b>ESSENTIAL DUTIES AND RESPONSIBILITIES:
</b></p><p></p><p><b>Vulnerability Mgt &ndash; Remediation &ndash; 60%
</b></p><ul><li>Serve as the primary escalation point and subject matter expert for the most complex and high‑risk remediation issues across infrastructure, cloud, containers, applications, and code.
</li><li>Provide advanced technical guidance on remediation paths, exploitability assessment, scanning output interpretation, and multi‑layered False Positive evaluations.
</li><li>Stay up to date on the latest vulnerabilities, exploitation techniques, and exploits.
</li><li>Independently own intake, investigation, escalation, and mitigation reviews for high-impact items such as critical vulnerabilities, emerging threats, and executive escalations.
</li><li>Drive and own sophisticated remediation planning that includes dependency mapping, coordinated timelines, and long-term fixes.
</li><li>Perform analytical reviews of large datasets to identify meaningful trends and shape targeted remediation campaigns for the highest areas of risk.
</li><li>Conduct proactive follow-up on stalled plans and escalate appropriately when remediation does not progress.
</li><li>Deliver expert-level communication to technical and non-technical stakeholders to ensure clarity of risk, urgency, and remediation requirements.
</li><li>Oversee False Positive determinations, Exception requests, and Risk Acceptance submissions to ensure accuracy, thoroughness, and adherence to governance standards.
</li><li>Partner with teams across Information Security and application teams across the Bank to ensure complex issues are addressed correctly and efficiently.
</li></ul><p></p><p><b>Metrics, Reporting &amp; Dashboards &ndash; 25%
</b></p><ul><li>Report and track vulnerability metrics, KPIs, and KRIs with proactive escalations to maintain risk within acceptable appetite.
</li><li>Create impactful presentations to deliver key metrics and data to senior leadership.
</li><li>Conceptualize, design, and update dashboards and workflows utilizing scripting, Power Automate, PowerBI, ServiceNOW, Brinqa, and/or other tools/processes as appropriate.
</li><li>Utilize macros, scripting, formulas, and optimizations for workflows in Excel.
</li></ul><p></p><p><b>Process Improvement &amp; Documentation &ndash; 15%
</b></p><ul><li>Work within Agile framework to deliver incremental value.
</li><li>Proactively identify opportunities for, and volunteer to, improve EVM processes and demonstrate measurable impact towards reducing inefficiencies.
</li><li>Build and maintain standards, playbooks, and repeatable processes to improve the efficiency and maturity of the vulnerability management program
</li><li>Mentor junior and mid‑level engineers through hands-on support, structured coaching, and direct involvement in complex cases.
</li><li>Contribute to the evolution of the Program and contribute to additional duties and projects as appropriate.
</li></ul><p></p><p><b>MINIMUM KNOWLEDGE, SKILLS AND ABILITIES REQUIRED:
</b></p><ul><li>At least 6 years of related and recent hands-on experience in Vulnerability Management, IS Engineering or similar Information Security domains.
</li><li>Strong attention to detail, and advanced understanding of security architecture, networking, operating systems, identity, and cloud services.
 </li><li>Demonstrated experience in risk articulation, and remediation strategies across common technology stacks.
</li><li>Experience with threat intelligence inputs and applying exploitability context to remediation prioritization.
</li><li>Demonstrated experience triaging and prioritizing complex findings from scanning tools and translating technical findings into actionable remediation guidance
</li><li>Strong written and verbal communication skills, including the ability to communicate effectively with senior leaders and with deeply technical teams.
</li><li>Proven analytical and problem-solving skills, including the ability to interpret large datasets and identify meaningful trends.
</li><li>Experience collaborating across multiple teams and influencing outcomes without direct authority.
</li><li>Bachelor&rsquo;s degree in computer science/information systems or equivalent combination of education and experience.
</li><li>Certifications such as Security+, CISSP, CISM, GIAC, or cloud certifications (AWS preferred).
</li></ul><p></p><p><b>PREFERRED KNOWLEDGE, SKILLS AND ABILITIES:
</b></p><ul><li>Experience supporting at least one of the following: cloud security, container security, application security, or code scanning programs.
</li><li>Experience building in, and maintaining enterprise workflow and reporting platforms such as ServiceNow, Brinqa, Power BI, and Power Automate.
</li><li>Working knowledge of scripting (for example Python, PowerShell, SQL) to support data analysis and workflow automation.
</li><li>Demonstrated experience in sysadmin, networking, or SOC roles.
</li><li>Experience embedding security controls into CI/CD pipelines and DevSecOps workflows.
</li><li>Hands-on experience implementing cybersecurity frameworks such as NIST CSF, NIST 800-53, CIS Controls, ISO 27001, and PCI DSS, including practical work aligning controls, assessing gaps, and guiding teams through remediation and compliance activities.
</li></ul><p>#LI-CB2
</p><p></p><p><i>Please note that this position is not available for immigration sponsorship.
</i></p><p></p>Lead Information Security Engineer - Vulnerability Management
<p></p>Total Base Pay Range 82,100.00 - 172,500.00 USD Annual
<p></p><p>At Fifth Third, we understand the importance of recognizing our employees for the role they play in improving the lives of our customers, communities and each other. Our Total Rewards include comprehensive benefits and differentiated compensation offerings to give each employee the opportunity to be their best every day.
</p><p></p><p>The base salary for this position is reflective of the range of salary levels for all roles within this pay grade across the U.S. Individual salaries within this range will vary based on factors such as role, relevant skillset, relevant experience, education and geographic location. In addition to the base salary, this role is eligible to participate in an incentive compensation plan, with any such payment based upon company, line of business and/or individual performance.
</p><p></p><p>Our extensive benefits programs are designed to support the individual needs of our employees and their families, encompassing physical, financial, emotional and social well-being. You can learn more about those programs on our 53.com Careers page at: https://www.53.com/content/fifth-third/en/careers/benefits.html or by consulting with your talent acquisition partner.
</p><p></p>LOCATION - Virtual, Ohio 00000
<p></p><p>Attention search firms and staffing agencies: do not submit unsolicited resumes for this posting. Fifth Third does not accept resumes from any agency that does not have an active agreement with Fifth Third. Any unsolicited resumes &ndash; no matter how they are submitted &ndash; will be considered the property of Fifth Third and Fifth Third will not be responsible for any associated fee.
</p><p></p><p>Fifth Third Bank, National Association is proud to have an engaged and inclusive culture and to promote and ensure equal employment opportunity in all employment decisions regardless of race, color, gender, national origin, religion, age, disability, sexual orientation, gender identity, military status, veteran status or any other legally protected status.</p></div><p></p>

Lead Information Security Engineer - Vulnerability Management

Tabby

<div><h3 class="jobSectionHeader"><b>Description</b></h3><div><br>
Tabby creates financial freedom in the way people shop, earn and save by reshaping their relationship with money. Over 15 million users choose Tabby to stay in control of their spending and make the most out of their money.</div><div>
<br>
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 40,000 global brands and small businesses, including Amazon, Noon, IKEA, and SHEIN use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>
</div><div>Tabby generates over $10 billion in annual transaction volume for its partner brands and is the highest-rated, most-reviewed, largest, and fastest-growing FinTech in the GCC region.<br>
</div><div>Tabby launched in 2019 and has since raised +$1 billion in equity and debt funding from global and regional investors, and is now valued at $4.5 billion.</div><div>
<br>
We are thrilled to announce an opportunity for a skilled Information Security Engineer to join our team and play a role in enhancing our security measures by utilizing your abilities and deep knowledge of information security methodologies. Paying attention to details and efficiently solving problems will be crucial in ensuring the safety of Tabby&rsquo;s systems.<br>
<br>
The role you will be involved in both operations and important implementation projects contributing to the growth and maintenance of our technology infrastructure. If you have a passion for cybersecurity, possess technical skills and aspire to make a significant impact we strongly encourage you to apply and become an essential part of our dedicated cybersecurity team.</div><h3 class="jobSectionHeader"><b><br>
Key Responsibilities</b></h3><br>
<ul>
<li>
<b>Penetration Testing</b>: Perform Dynamic Application Security Testing (DAST) and Static Application Security Testing (SAST) for Web, Mobile, and API applications. Plan and conduct Infrastructure Vulnerability Assessment and Penetration Testing of systems, switches, servers, and more.</li>
<li><b>Adversary Simulation (Red Teaming):</b> Participate in sophisticated Red Team</li>
<li>engagements, emulating real-world threat actor Tactics, Techniques, and Procedures (TTPs) to assess the detection and response capabilities of the Blue Team/SOC.</li>
<li><b>Vulnerability &amp; Application Security Analysis:</b> Conduct both Dynamic (DAST) and Static (SAST) Application Security Testing, and perform systematic vulnerability assessments using automated tools combined with meticulous manual verification.</li>
<li><b>Report Development:</b> Produce actionable, high-quality assessment reports that clearly articulate technical findings, business risk, and remediation strategies for both technical implementers and non-technical executives.</li>
<li><b>Control Evasion &amp; Social Engineering:</b> Conduct controlled offensive testing, including Breach &amp; Attack Simulations (BAS) and targeted phishing campaigns, to assess the resilience and bypassability of technical and human controls.</li>
<li><b>Tool Development &amp; Reporting:</b> Develop and maintain custom scripts and tools to enhance offensive security capabilities, and produce high-quality, actionable reports detailing discovered threats and validated vulnerabilities on an ongoing basis.</li>
<li><b>Security Awareness</b>: Experience in conducting phishing simulations and other</li>
<li>awareness exercises to evaluate employee susceptibility to social engineering attacks and provide targeted training to enhance resilience.</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
Skills, Knowledge &amp; Expertise</b></h3><br>
<ul>
<li>
Degree in Information Technology, Computer Science, Software Engineering, or related field</li>
<li>Knowledge of Information Technology security issues and approaches to manage</li>
<li>Information Technology security with a fast paced Fintech environment.</li>
<li>Security Qualification Good to have: Offensive Security Certified Professional (OSCP), GIAC Penetration Tester (GPEN), GIAC Web Application Penetration Tester (GWAPT), CREST Registered Penetration Tester (CRT) or equivalent.</li>
<li>Excellent communication, influencing and stakeholder management skills</li>
<li>2-3 Experience of working across teams to deliver solutions and generate high levels of internal buy-in</li>
<li>Experience of working in a culturally diverse environment</li>
<li>Knowledge of online technologies, payment methods, content delivery networks, REST APIs, microservices, and application development.</li>
<li>Programming and scripting understanding (Bash, Python etc.)</li></ul><div></div><h3 class="jobSectionHeader"><b><br>
About Tabby</b></h3><div>
Tabby creates financial freedom in the way people shop, earn and save, by reshaping their relationship with money.<br>
<br>
The company&rsquo;s flagship offering allows shoppers to split their payments online and in-store with no interest or fees. Over 32,000 global brands and small businesses, including Amazon, Noon, IKEA and Shein use Tabby to accelerate growth and gain loyal customers by offering easy and flexible payments online and in stores.<br>
<br>
Tabby has generated over $7 billion in transaction volume for its partner brands and has the highest rated, most reviewed, largest and fastest growing app of any fintech in the GCC region.<br>
<br>
Tabby launched operations in 2020 and has raised +$1 billion in equity and debt funding from global and regional investors.</div></div>

Information Security Engineer - VAPT (Saudi National)

Search 10000+ Information engineer jobs near you this May. New roles added regularly across leading industries. Apply today.