Senior Information Security Engineer

Company

Federal Reserve Bank of ChicagoThe Federal Reserve Bank of Chicago is one of 12 regional Reserve Banks that, along with the Board of Governors in Washington, D.C., make up our nation's central bank. Our work promotes a safe, sound, and stable financial system which fosters an economy that works for everyone, so people can find jobs and prices remain stable.

Together, we serve in an innovative environment that values our employees and applies the highest ethical standards. Our culture is deeply rooted in our service to our nation and our organizational values of integrity, service, innovation, inclusion, growth, and development. As an employee with us, you’ll find support to grow amongst a diverse team, while feeling united by our clear and common purpose.

About FRFS

The Federal Reserve Financial Services (FRFS) enterprise delivers a suite of payments services to financial institutions via FedLine® Solutions, Fedwire®, National Settlement Service (NSS), FedCash®, FedACH® (Automated Clearing House), and Check Services.

The Customer Operations and Security team is responsible for the security of the FRFS aggregate infrastructure and production operating environment, including customer (e.g., depository institution) security. Our work spans incident response for customer security events, threat landscape and intel gathering, insider risk management, vulnerability management and technical currency coordination, and end-to-end observability of key security events across the FRFS infrastructure. This team builds and runs the real-time “common operating picture” capability for security end-to-end from the customer to the FRS.

The Senior Information Security Engineer role includes the following responsibilities :

• Manages and maintains the organization’s vulnerability management program, including but not limited to : compiling metrics and performance across the enterprise and its products;improving and maintaining processes to categorize vulnerabilities and route to appropriate implementation teams for resolution;supporting FRFS cyber risk assessment, evaluation and tolerance processes;tracking and ongoing reporting of key performance and risk indicators;serving as a liaison between FRFS IS and other key internal and external stakeholders (i.e., FRFS Enterprise Risk, FRFS Resiliency, auditors, and external customers and Financial Services industry partners, etc.).
• Establishes and maintains end-to-end observability processes and improvements, including but not limited to : defining key alerts and monitors in centralized tools to support an effective incident response process;ensuring effective monitoring to support a robust end-to-end security posture;collaborating with other shared services teams to bring the vision to reality in iterative and incremental fashion.
• Key participant in cyber incident response processes and maintainer of associated processes and procedures.
• Maintains relationships with business areas that interact with FRFS, District, and National governance processes in a moderately complex manner on a regular basis.
• Supports the collection and tracking of cybersecurity and threat intelligence information via open-source and private partnerships.

The primary desired work location for this position is Chicago, Kansas City, or New York, but candidates that live anywhere in the continental US will be considered. The level of work required is considered intermediate to advanced and staff must be able to work under general to limited supervision . This job does not have any direct reports.

This position is full time in the office with flexibility and may require you to travel as much as 10% of the time.

Your Background :

What we offer

Other Requirements

The expected starting salary range for this position is between $140,500 and $166,200 annually in addition to annual performance-based discretionary bonuses. Final salary and offer will be determined based on the applicant’s relevant experience, skills, internal equity, and alignment with geographic and other market data.

Always verify and apply to jobs on Federal Reserve System Careers or through verified Federal Reserve Bank social media channels.

Full Time / Part Time

Full time

Regular / Temporary

Regular

Job Exempt (Yes / No)

Yes

Job Category

Information Technology Family Group

Work Shift

First (United States of America)

Always verify and apply to jobs on Federal Reserve System Careers () or through verified Federal Reserve Bank social media channels.