Principal Security Engineer

Citizens Financial Group; United States; On-site; USD 140,000 - 180,000; Full time

Benefits offered by this job

Health insurance

Retirement benefits

Flexible work arrangements

Education reimbursement

Wellness programs

Job summary

Citizens Financial Group is seeking a Principal Security Engineer to support the cyber team overseeing mergers and acquisitions. You will collaborate with executives and security/technology experts to analyze security for acquisitions, develop and implement strategic solutions, and guide remediation across all domains of security.

The role emphasizes risk-based decision making, strong communication, and the ability to work independently in a fast-paced environment.

Qualifications

• 10+ years of security experience across domains.
• Understanding of programming concepts, OWASP and secure coding practices.
• Knowledge of Generative AI and agentic principles.
• Experience with application code scanning tools and security vulnerabilities.
• Experience with pen testing and vulnerability remediation.
• Strong documentation and communication skills.

Responsibilities

• Build relationships with stakeholders across security and technology.
• Develop partnerships with business leadership.
• Analyze cyber, technology and business information to develop strategic plans.
• Provide hands-on support, remediation guidance and strategic insights.
• Support acquisitions with due diligence, discovery, and integration strategies.

Skills

Security strategy

Stakeholder communication

Penetration testing

IAM best practices

Cloud security

Vulnerability management

Scripting (Python/PowerShell)

Education

BA/BS in IT security or CS

Job description

ThePrincipal Security Engineer role will support the cyber team that handles the mergers and acquisitions within in Citizens bank, working closely with technology and the business on requirements, strategy and tactical implementations and integration into Citizens.

In this role you will work closely with executives from all areas of the company as well as security and technology experts across the enterprise to analyze the potential acquisitions security, develop strategic and tactical solutions, troubleshoot, provide hands on support as well as understand requirements and take actions or provide guidance on remediations across all domains of security.

Primary Responsibilities include:

• Building strong relationships with stakeholders across security and technology
• Develop and maintain strong partnerships with business leadership
• Analyzing a large set of cyber and technology and business information to develop strategic plans
• Critical thinking skills across both the business, technology, legal and cyber space
• Ability to quickly pivot direction and solutioning options within tech and cyber
• Communicate and present to the business, technology and cyber
• Think outside the box to generate new and innovative solutions while taking a risk based approach to all areas of cyber
• Ability to organize and methodically drive ideas in an everchanging environment
• Develop Risk Based Mitigations and Solutions
• Supporting various security integration efforts across the business lines
• Supporting deployment of security tools and software
• Providing internal awareness and consulting to colleagues within the business, technology and cyber regarding security initiatives and threats
• Providing support for new acquisitions by way of due diligence, discovery, vulnerability remediation, integration strategy and tactical implementation.

Required Skills/Experience:

• 10 or more year of Security experience in all domains with a large range of knowledge
• Understanding conceptually programming languages, OWASP and Security best practices in application code development
• Understanding of Generative AI and Agentic principles
• Understanding of application code scanning tools for security vulnerabilities
• Understanding and practical knowledge related to pen testing
• Understanding of Information Technology general practices
• Ability to write technical documentation and analyze security issues
• Proven verbal and written communication skills with the ability to present technical concepts to non-technical audiences
• Ability to understand conceptually writing scripts, trouble shoot technical security issues within Linux and windows systems.
• Working knowledge of identity and access management best practices, current tooling for IAM tasks, active directory, Identity store tools, authentication, and authorization best practice for both internal employee and external party access patterns.
• Working knowledge of DLP and data protection best practices and tools
• Working knowledge of common operating systems and networking concepts
• Working knowledge of security event logging and monitoring systems and processes
• Working knowledge of common server systems and concepts
• Working knowledge of common scripting languages (Python, PowerShell)
• Working knowledge of Anti-Virus Implementation and monitoring
• Working knowledge of Firewall security posture and management a plus
• Working knowledge of security principles for cloud platforms
• Working knowledge of vulnerability management program; detection, reporting, communication, and remediation
• Working knowledge of cyber threat modeling, compromise assessments
• Working knowledge of Federally regulated banking best cyber and physical security practices
• Experience with taking small amounts of cyber information and develop strategic plans working with the business and technology
• Ability to work independently with little guidance
• Ability to thrive in a fast past and ever-changing environment.
• Working knowledge of common architect and patterns across networking, cyber, technology
• Ability to take information both verbally and written, and present it in a concise and clear manner, that articulates the problem and the solution to a business user.
• Experience with risk based decision making and risk articulation and documentation

Education and Certifications:

BA/BS degree in IT security, computer science or related field required

Onsite Locations:

Johnston, RI \ Dallas Irving, TX \ Plano, TX \ Franklin, TN \ Iselin, NJ \ Boston, MA \ Providence, RI

Work Schedule: Monday through Friday

Pay Transparency

The salary range for this position is $140,000 - $180,000 per year, plus an opportunity to earn an annual discretionary bonus. Actual pay is based on various factors including but not limited to the work location, and relevant skills and experience.

We offer competitive pay , comprehensive medical, dental and vision coverage, retirement benefits, maternity/paternity leave, flexible work arrangements, education reimbursement, wellness programs and more. Note, Citizens' paid time off policy exceeds the mandatory, paid sick or paid time-away policy of every local and state jurisdiction in the United States. For an overview of our benefits, visit https://jobs.citizensbank.com/benefits .

Required Skills

• Compliance and Controls
• Customer Empowerment
• Diversity and Inclusion Practice
• Leading Others
• Principles of Information Technology
• Principles of Information Technology (IT)
• Systems Implementation and Management

About Us

Citizens, its parent, subsidiaries, and related companies (Citizens) provide equal employment and advancement opportunities to all colleagues and applicants for employment without regard to age, ancestry, color, citizenship, physical or mental disability, perceived disability or history or record of a disability, ethnicity, gender, gender identity or expression, genetic information, genetic characteristic, marital or domestic partner status, victim of domestic violence, family status/parenthood, medical condition, military or veteran status, national origin, pregnancy/childbirth/lactation, colleague’s or a dependent’s reproductive health decision making, race, religion, sex, sexual orientation, or any other category protected by federal, state and/or local laws. At Citizens, we are committed to fostering an inclusive culture that enables all colleagues to bring their best selves to work every day and everyone is expected to be treated with respect and professionalism. Employment decisions are based solely on merit, qualifications, performance and capability.

Equal Employment and Opportunity Employer

Any offer of employment is conditioned upon the candidate successfully passing a background check, which may include initial credit, motor vehicle record, public record, prior employment verification, and criminal background checks. Results of the background check are individually reviewed based upon legal requirements imposed by our regulators and with consideration of the nature and gravity of the background history and the job offered. Any offer of employment will include further information.

Job Info

• Job Identification 47390
• Job Category Technology
• Degree Level Bachelor's Degree
• Job Schedule Full time
• Job Shift 1st
• Locations One Citizens Bank Way, Johnston, RI, 02919, US