Lead Information Security Engineer - Cyber Defense

Fifth Third Bank; United States; Remote; USD 140,000 - 190,000; Full time

Job summary

Fifth Third Bank is seeking a Lead Information Security Engineer to guide cloud-native and AI-enabled security engineering efforts. You will work with detection, response, and threat intel teams to build scalable infrastructure and applications that deter cyber threats.

Responsibilities include architecting AWS-based workloads, IaC automation, and leading code reviews for containerized and AI-enabled systems. Strong Kubernetes and EKS experience preferred.

Qualifications

• Passion for finding creative and innovative ways to detect and deter cybercriminals.
• Proven track record of building production-quality software and automation in one or more languages (Python, Go).
• Experience with AI-assisted software engineering techniques and tooling.
• In-depth knowledge of AWS, cloud networking, identity, security, compute, storage, and observability.

Responsibilities

• Contribute to and enhance detection, response, and intel-related applications and platforms in cloud-native and AI-enabled contexts.
• Provide lead-level engineering review and approval of code changes across app, IaC, containerized, serverless, and AI workloads in cloud environments.
• Build, integrate, and maintain AI engineering harnesses and tools in AWS with observability and security controls.
• Engineer and support containerized workloads using Docker, Kubernetes, and Amazon EKS with focus on deployment, scaling, and security.
• Apply engineering judgment, testing, and security controls to AI-generated artifacts throughout the lifecycle.

Skills

Python

Go

AI engineering

Security engineering

Tools

Docker

Kubernetes

Amazon EKS

Splunk

Elasticsearch

EDR

SIEM

SOAR

XDR

Bedrock (AWS AI)

Job description

Make banking a Fifth Third better®

We connect great people to great opportunities. Are you ready to take the next step? Discover a career in banking at Fifth Third Bank.

GENERAL FUNCTION:

The Lead Information Security Engineer (ISE) will help lead our software, platform, and site reliability engineering work with the detection, response, and threat intel analysts to build, deploy, and manage scalable infrastructure and applications that help us detect, track, and deter cybercriminals.

The Lead ISE will help architect cloud-based workloads and automate integration and deployments including application code, infrastructure code, and security-focused tooling and configuration. This includes containerized workloads running in AWS, including Amazon EKS, and the engineering and operation of AI-enabled applications, agents, and engineering harnesses.

The ISE will be a member of an Agile squad, working closely with squad members, the Product Owner and Agilist to complete work in two-week sprints. The ISE will also model modern software engineering practices, including effective and responsible use of AI-assisted software engineering.

WHAT YOU WILL BE DOING:

Contribute to and enhance our detection, response, and intel-related applications and platforms, including cloud-native and AI-enabled capabilities.

Provide lead-level engineering review and approval of code changes, including application, infrastructure-as-code, containerized, serverless, and AI-enabled workloads in a cloud environment.

Build, integrate, and maintain AI engineering harnesses and supporting services in AWS, including the patterns, tooling, controls, observability, and integrations required to safely use AI across software and security engineering workflows.

Engineer and support containerized workloads using Docker, Kubernetes, and Amazon EKS, including deployment, configuration, scaling, observability, reliability, networking, and security considerations.

Use traditional and AI-assisted software engineering tools throughout the development lifecycle while applying appropriate engineering judgment, testing, code review, security controls, and validation of AI-generated artifacts.

Support the Bank's operational information security responsibilities, including the development and maintenance of standards, procedures, and guidelines necessary to satisfy the Information Security department's technology and security operations.

Provide technical support to regulatory agencies, external auditors, and internal auditors, as required, to respond to audits and examinations of the Bank's control environment.

Seek and maintain knowledge through cross-skilling and up-skilling in current and emerging security, cloud, software engineering, and artificial intelligence technologies.

Other duties as assigned.

WHAT YOU SHOULD HAVE:

Passion for finding creative and innovative ways to detect and deter cybercriminals.

Proven track record of building production-quality software, tooling, automation, and/or services in one or multiple languages (e.g. Python, Go). Experience using AI-assisted software engineering techniques and tooling to improve engineering effectiveness.

In-depth knowledge of how the Cloud works, with demonstrated experience effectively using a range of AWS services and understanding cloud networking, identity, security, compute, storage, and observability principles.

Belief that infrastructure should be deployed as code, with experience applying Infrastructure-as-Code and automated delivery practices to repeatable, auditable cloud environments.

Knowledge of tools commonly used for Information Security, such as Splunk, Elasticsearch, EDR, SIEM, SOAR, XDR, etc.

Experience building and integrating solutions across on-prem, hybrid, and/or exclusively cloud environments.

Experience building, securing, troubleshooting, and operating containerized applications using Docker or equivalent container technologies.

Experience with Kubernetes and container orchestration is strongly preferred, with particular preference for hands-on experience with Amazon EKS. Candidates should understand, or demonstrate the ability to quickly develop proficiency in, Kubernetes workload deployment, configuration, networking, scaling, observability, reliability, and security principles.

Experience building or supporting applications that use foundation models, AI agents, or AI engineering frameworks is strongly preferred. Experience with AWS AI capabilities, including Amazon Bedrock, is particularly valuable.

Understanding of engineering considerations for AI-enabled systems, including model access, tool integration, identity and permissions, data protection, observability, evaluation, testing, human oversight, and controls for AI-generated code and actions.

An architect's mindset in that you understand how systems interconnect and can design, reason about, and troubleshoot distributed cloud-native systems effectively.

A mentor mindset and love to model modern software engineer