Security Engineer

Celtic Bank; Salt Lake City (UT); Hybrid; USD 110,000 - 160,000; Full time

Benefits offered by this job

Medical benefits

401(k) plan

Life & disability coverage

HSA & FSA plans

Paid time off

Wellness program

Job summary

Celtic Bank is seeking a Security Engineer to protect systems, data, and technology across identity, network, endpoint, and cloud environments. You’ll administer Rapid7, build asset inventories, and own CAASM to identify at-risk assets.

You’ll lead MFA for endpoints, the SASE conversion, and CASB/SSPM initiatives while supporting incident response and security metrics. You'll also manage CrowdStrike sensors, Dashlane password management, and documentation.

Qualifications

• Bachelor’s degree in Information Technology, Computer Science, Information Security, or related field; security certifications preferred.
• 3–5 years hands-on information security or enterprise IT experience focused on attack surface, endpoint and identity security.
• Experience administering an attack surface management platform and building asset inventory from discovery data.
• Experience with endpoint detection and response tooling, preferably CrowdStrike, including policy configuration and detection triage.
• Familiarity with SASE, CASB, SSPM concepts and at least one deployment.

Responsibilities

• Administer, configure, and maintain Rapid7 attack surface management platform and asset inventory.
• Own CAASM data to identify unmanaged, unprotected, or misconfigured assets.
• Lead desktop authentication projects, implementing two-factor auth for endpoint sign-in.
• Oversee SASE conversion, policy definition, rollout, and migration from legacy controls.
• Lead CASB and SSPM projects with policy, monitoring, and remediation workflows.
• Maintain CrowdStrike protection, sensor health, and health reporting.
• Maintain Dashlane password management, provisioning, and adoption reporting.
• Support incident response across endpoint, identity, and cloud events.
• Track posture metrics and milestone progress for IT and security leadership.
• Develop and maintain technical runbooks and runbooks.

Skills

Attack surface

CrowdStrike

Two-factor auth

Incident response

CasB / SSSPM

SASE

SSPM

Rapid7

Endpoint security

Regulatory compliance

Education

Bachelor's degree in Information Security or related field

Security+ or SSCP preferred

Tools

Rapid7

CrowdStrike

Dashlane

Job description

Celtic Bank is seeking a skilled Security Engineer to help protect the Bank’s systems, data, and technology environment. This role is responsible for identifying, reducing, and continuously managing internal and external security risks while leading key security initiatives across identity, network, endpoint, and cloud environments.

The Security Engineer will administer critical security platforms, maintain a consolidated technology asset inventory, and lead projects involving modern desktop authentication, Secure Access Service Edge (SASE), Cloud Access Security Broker (CASB), and SaaS Security Posture Management (SSPM). This position will also support incident response activities and help continuously strengthen the Bank’s overall security capabilities.

What You’ll Do

• Administer, configure, and maintaintheRapid7 attack surface management platform, including discovery scope, scan configuration, and exposure triage.
• Build and maintain a consolidated asset inventory using the attack surface management tool, reconciling discovered assets against authoritative systems of record.
• Own cyber asset attack surface management (CAASM), correlating asset, vulnerability, and tool-coverage data to identify unmanaged, unprotected, or misconfigured assets.
• Lead the modern desktop authentication project, implementing two-factor authentication for endpoint sign-in across the environment.
• Lead the Secure Access Service Edge (SASE) conversion project, including design, phased rollout, policy definition,andmigration from legacy network access controls.
• Lead the cloud access security broker (CASB) and SaaS security posture management (SSPM) projects, establishing policy, monitoring, and remediation workflows for sanctioned and unsanctioned cloud applications.
• Maintain CrowdStrike endpoint protection, including sensor deployment and health, policy tuning, detection triage, and coverage reporting.
• Maintain the Dashlane enterprise password management platform, including provisioning, group and sharing standards, and adoption reporting.
• Support incident management and response, including investigation, containment, and post-incident remediation for endpoint, identity, and cloud events.
• Track and report security posture metrics, including asset coverage, attack surface exposure, two-factor enrollment, and project milestones, to IT and security leadership.
• Develop and maintain technical documentation, including tool configurations, project designs, operational procedures, and runbooks.

• Bachelor's degree in Information Technology, Computer Science, Information Security, or a related field, or equivalent combination of education and experience; security certifications (e.g., Security+, CySA+, SSCP) preferred.

• 3–5 years of hands‑on experiencein information security or enterprise IT, with a focus on attack surface, endpoint, and identity security.

• Demonstrated experience administeringan attack surface management platform (Rapid7 or comparable) and building asset inventory from discovery data.

• Experience with endpoint detection and response tooling, preferably CrowdStrike, including policy configuration, sensor health, and detection triage.

• Working knowledge of SASE,CASB, andSSPM concepts, with experience supporting or leading the deployment of at least one.

• Experience implementing multi‑factor authentication for endpoint or workstation sign‑in, and familiarity with enterprise password management platforms such as Dashlane.

• Understanding of information security principles, data classification, and regulatory requirements applicable to financial institutions (e.g., GLBA, FFIEC,ISO 27001).

• Experience participating in incident response, including investigation, containment, and remediation, and the ability to lead technical projects across multiple teams.

• Strong analytical, troubleshooting, and documentation skills, with the abilityto communicate technical concepts clearly to both technical and non‑technical audiences.

• Medical, dental, vision

• 401(k) with employer match
• Life and long‑term disability coverage
• HSA and FSA plans
• Holidays and paid time off requests
• Robust wellness program (we’re talking catered meals three times a week, lunch and learns, and onsite gym!)

Headquartered in the heart of downtown Salt Lake City, Utah, Celtic Bank was named a top SBA lender in the nation in 2025! Celtic Bank is a leading nationwide lender specializing in SBA 7(a), SBA 504, USDA B&I, express loans, asset‑based loans, commercial real estate loans and commercial construction loans.

Celtic Bank is an equal opportunity employer and complies with all applicable federal, state and local fair employment practices laws.

Physical and Other Requirements

This job operates in a professional office environment. This role routinely uses standard office equipment such as computers, phones, photocopiers, filing cabinets and fax machines. The demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

• Stationary Work: The employee is frequently required to stand; walk; use hands to type, handle documents, and perform other office related duties. Exerting up to 10 pounds of force occasionally and/or negligible amount of force frequently or constantly to lift, carry, push, pull or otherwise move objects.
• Mobility: The employee in this position needs to occasionally move between work sites and inside the office to access file cabinets, office machinery, etc.
• Communicate: The employee is regularly required to talk or hear and will frequently communicate with others. Must be able to read, write and understand fluent English.
• Work Model: The employee in this position will work either a fully Onsite or Hybrid work model. All employees, regardless of location, may be required to travel to the Salt Lake City office for mandatory company meetings, events, or related occasions.
• Utah‑based employees: Hybrid work schedule available after initial training period in our Salt Lake City, Utah office – department and job requirements will determine eligibility.