IT Security Engineer

Fidelity Bank, NA; Wichita (KS); On-site; USD 100,000 - 150,000; Full time

Job summary

Fidelity Bank, NA is seeking an information security professional to support the design, deployment, and ongoing improvement of our enterprise security program. You will work across identity and access controls, monitoring, and data protection to defend banking systems and customer data.

The role involves monitoring alerts, supporting incident response, and coordinating with IT operations to harden systems.

Qualifications

• Ability to analyze complex security issues and implement compensating controls.
• Strong interest in technical and business aspects of information security.
• Excellent logical reasoning to identify strengths and weaknesses.
• Critical thinking for medium to complex situations with a forensic approach.

Responsibilities

• Assist in designing and maintaining the enterprise security architecture and program.
• Deploy and tune security tools and controls including identity/access, monitoring, SIEM, and DLP.
• Monitor security alerts, investigate activity, support incident response from detection to remediation.
• Perform vulnerability scans, track findings, and coordinate fixes with system owners.
• Administer and optimize SIEM platforms, build detection use cases, and create dashboards.

Skills

Security architecture

Incident response

Threat monitoring

Communication skills

Education

Bachelor’s degree in Information Security or related field

Tools

Splunk

Tenable

Firewalls

Job description

Job Overview:

Fidelity is a financial institution driven by innovative technology designed to evolve our products, services and experience to exceed expectations and allow customers to bank when and where they want. Fidelity’s information technology department keeps internal and external software, hardware, systems and services online, updated and secure. If you’re an IT professional seeking opportunities to continually innovate and work for a company that shares that goal, let’s talk.

The candidate for this position will be responsible for:

• Assisting in and supporting the design, implementation, and continuous improvement of the enterprise security architecture and overarching Information Security Program.
• Participating in the design, deployment, maintenance, and continued evolution of security tools and controls, including identity and access controls, monitoring capabilities, defensive security processes, SIEM, email security, firewalls, end point protection, and data loss prevention.
• Monitoring security alerts, investigating activity, and supporting incident response from detection through remediation.
• Conducting vulnerability scans, tracking findings to resolution, and working with system owners to prioritize and applying fixes.
• Administering and tuning the SIEM platform, including onboarding log sources, building and refining correlation rules and detection use cases, reducing false positives, and creating dashboards and reports to support threat detection, investigations, and compliance requirements.
• Performing security reviews of new systems, vendors, applications, network changes, branch initiatives, and enterprise projects to ensure appropriate security requirements are identified and implemented.
• Hardening operating systems, databases, network devices, application security, and cloud workloads against industry benchmarks such as NIST CSF
• Partnering with Information Technology Operations to improve identity and access controls, including privileges access, conditional access, role-based access, and user lifecycle security controls.
• Supporting audit, regulatory, risk assessment, and compliance activities by providing evidence, explaining technical controls, remediating findings, and maintaining documentation that demonstrates control effectiveness.
• Developing and maintaining security standards, procedures, runbooks, technical documentation, diagrams, control evidence, and operational playbooks for assigned security platforms and processes.
• Tracking emerging threats and vulnerabilities and recommending improvements to the Information Security Program.
• Participating in incident response exercises, tabletop drills, and on-call rotation as needed.
• Identifying opportunities to automate security operations, improve alert quality, reduce manual processes, strengthen detection capabilities, and mature overall security posture.
• Translating technical security issues into clear business risk language for IT, internal business units, risk, audit, and executive stakeholders.
• Maintaining a high degree of professionalism, discretion, integrity, and sound judgment when handling sensitive information and security incidents.
• Ensuring compliance with all banking laws, rules, regulations, and prescribed policies/practices/procedures necessary to reduce risk and uphold ethical standards related to and required by one's duties.

Requirements for the position include:

• Ability to analyze and assess complex security issues and facilitate the development and implementation of effective compensating controls.
• Keen interest in both technical and business aspects of information security.
• Ability to use logic and reasoning to identify strengths and weaknesses.
• Critical thinking for medium to complex situations and a forensic approach to challenges.
• Willingness to handle confidential information with discretion and integrity.
• Strong written and verbal communication skills, including the ability to develop standards, procedures, summaries, diagrams, and control evidence.
• Attention to detail and a strong desire to learn and adaptability in the face of constant change.
• Working knowledge of security fundamentals: network security, encryption, PKI, authentication protocols, and secure architecture.
• Experience with security tooling such as the SIEM platform Splunk, the endpoint detection platform Tenable, and firewalls.
• Working knowledge of security expectations, risk management practices, audit evidence requirements, and regulatory frameworks such as FFIEC, GLBA, NIST Cybersecurity Framework, and related industry guidance.
• Strong organizational skills with the ability to manage multiple priorities, document work clearly, meet deadlines, and drive issues to resolution.

Preferred qualifications for this position include:

• Bachelor’s degree in Information Security, Computer Science, Information Technology, Cybersecurity, or related field preferred.
• Equivalent combination of education, technical certifications, and relevant experience may be considered.
• Security certifications such as CISSP, CISM, CCSP, GIAC, Security+, Microsoft Security certifications, or related credentials preferred.

EEO/Veterans/Disabled

Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities
This employer is required to notify all applicants of their rights pursuant to federal employment laws.For further information, please review the Know Your Rights notice from the Department of Labor.