Principal Security Engineer

Valley National Bank; Morristown (NJ); On-site; USD 140,000 - 190,000; Full time

Job summary

Valley National Bank in Morristown, NJ seeks an experienced security leader to design and govern the organization’s security engineering program. The role focuses on vulnerability management, cloud and API security, Zero Trust, and risk-based controls to protect critical assets.

You will collaborate with Engineering, IT, Product, and business stakeholders, develop executive metrics, and mentor teams on secure development practices and innovative security solutions.

Responsibilities

• Establish and maintain security engineering capabilities and processes across vulnerability management, patch governance, and secure software development.
• Assess and govern emerging technologies, including AI/ML, establishing security requirements, risk frameworks, data protection, and model governance.
• Lead enterprise security architecture, engineering, and cyber risk management with strategy, standards, and roadmaps across vulnerability management, cloud, application, infrastructure, identity, and emerging tech.
• Drive risk-based security assessments and remediation across infrastructure, cloud, applications, endpoints, identities, and external surfaces with cross-functional collaboration.
• Design, implement, and govern security controls aligned to Zero Trust, including IAM, privileged access, authentication/authorization models, conditional access, and segmentation.
• Develop and maintain security architecture standards, reference designs, and engineering patterns for cloud, infrastructure, applications, APIs, data protection, identity services, and AI-enabled solutions.
• Own API Security and Integration Governance, defining standards, baselines, and guardrails for secure API authentication, authorization, encryption, and onboarding of services.
• Enhance security visibility and automation by integrating security platforms, cloud inventories, asset management, identity platforms, AI analytics, ticketing, and workflows.
• Provide technical security leadership and governance, developing executive metrics and risk reporting, supporting audit readiness, and mentoring teams on best practices.

Job description

Responsibilities include but are not limited to:

• Establish and maintain security engineering capabilities and processes, including vulnerability management, secure configuration management, patch governance, security testing, penetration testing remediation, secure software development practices, and security automation.


• Assess, secure, and govern emerging technologies, including AI and machine learning solutions, establishing security requirements, risk frameworks, data protection controls, model governance practices, and responsible AI security standards across the organization.


• Lead and evolve enterprise security architecture, engineering, and cyber risk management capabilities, establishing strategy, standards, and roadmaps across vulnerability management, cloud security, application security, infrastructure security, identity security, and emerging technology domains.


• Drive risk-based security assessments and remediation efforts across infrastructure, cloud platforms, applications, endpoints, identities, and external attack surfaces, partnering with Engineering, IT, Product, and business stakeholders to reduce enterprise risk and improve security resilience.


• Design, implement, and govern security controls aligned to Zero Trust principles, including identity and access management, privileged access management, authentication and authorization models, conditional access policies, segmentation strategies, and continuous verification approaches.


• Develop and maintain security architecture standards, reference designs, and engineering patterns for cloud, infrastructure, applications, APIs, data protection, identity services, and AI-enabled solutions, ensuring alignment with business objectives and regulatory requirements.


• Own API Security and Integration Governance, defining security standards, configuration baselines, and architectural guardrails while ensuring secure API authentication, authorization, encryption, traffic management, and onboarding of new services across enterprise environments.


• Enhance security visibility, telemetry, and automation by integrating security platforms, cloud inventories, asset management systems, identity platforms, AI-powered analytics, ticketing systems, and operational workflows to improve detection, prioritization, and response capabilities.


• Provide technical security leadership, governance, and strategic direction, developing executive-level metrics and risk reporting, supporting audit and regulatory readiness, serving as a subject matter expert across security architecture, engineering, identity, and vulnerability management, and mentoring team members on security best practices and innovation.