Senior IAM Engineer

mtb; Buffalo (NY); On-site; USD 97,000 - 162,000; Full time

Job summary

M&T Bank is seeking a security engineer to design and implement medium-scale security solutions, solving moderate to complex problems and supporting day-to-day security operations.

The role focuses on DLP, identity and access engineering, secure network design, and continuous monitoring. You will collaborate with Cybersecurity and Technology teams and contribute to risk reduction and regulatory compliance.

Qualifications

• Bachelor's degree and a minimum of 3 years' relevant work experience, or a combined minimum of 7 years' higher education and/or work experience.
• Experience with cybersecurity tools and controls.
• Strong written and verbal communication skills.
• Ability to influence and work with leaders to drive results.

Responsibilities

• Design components of security solutions with significant complexity and moderate risk, aligning with cybersecurity objectives.
• Configure and develop controls for security tools or systems to fortify defenses.
• Design and execute testing of systems and technology for reliability and effectiveness.
• Deploy security systems and code with seamless integration while minimizing disruption.
• Continuously monitor and tune security systems to enhance threat mitigation.
• Develop automated installation, configuration, and processes to streamline security operations.
• Partner with Cybersecurity and Technology teams on implementations and maintenance.
• Maintain internal controls to mitigate risk and escalate issues as needed.
• Promote an environment aligned with the company's risk standards.

Skills

Security engineering

Threat detection

Automation

Cross-functional collaboration

Education

Bachelor's degree

Job description

Overview: Responsible for designing and implementing medium-scale security systems and solutions to develop or enhance new or existing security solutions, solving moderate to complex problems or enhancements. Completes day-to-day support activities and special projects.

Primary Responsibilities

• Design components of security solutions with significant complexity and moderate risk, ensuring alignment with cybersecurity objectives and organizational needs
• Configure and develop controls for security tools or systems to fortify system defenses.
• Design and execute testing of systems and technology thoroughly in coordination with cross-functional teams to ensure reliability and effectiveness of security measures.
• Deploy security systems and code, ensuring seamless integration into existing infrastructure while minimizing disruptions.
• Continuously monitor and tune security systems to enhance efficiency and effectiveness in mitigating and detecting threats.
• Develop and implement automated installation, configuration, and processes to streamline security operations and response activities.
• Partner with Cybersecurity and Technology teams on security solutions implementations and maintenance
• Proactively recommend process enhancements and implements prioritized improvements within Cybersecurity team.
• Engage with vendor for routine security products or solutions support.
• Understand and adhere to the Company's risk and regulatory standards, policies, and controls in accordance with the Company's Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

Scope of Responsibilities

• Data Loss Prevention Engineering - designs and implements strategies and technologies to prevent unauthorized access, transmission, or leakage of data within and outside of the Bank's network and systems.
• Detection Engineering - develops and deploys systems and processes to identify and respond to cybersecurity threats and incidents in real-time, aiming to minimize the impact of security events.
• Identity and Access Engineering - develops and manages the architecture, automation, and control mechanisms for provisioning of least privilege access for employees and contractors to internal and 3rd party systems, applications, and data sources.
• Security & Network Infrastructure - designs and implements secure network architecture, protocols, and technologies to protect data in transit, prevent unauthorized access, and detect and mitigate network-based attacks. Architects, maintains, and optimizes the tools and capabilities leveraged by cyber security to achieve organizational objectives.
• Protection Engineering - designs and implements security strategies, systems, policies, and procedures that proactively protect against cybersecurity threats and malicious activities targeting the Bank's systems and assets.
• Cloud Engineering - designs and implements the security of the organization's cloud computing environment to protect against cybersecurity threats and malicious activities.

Partners primarily with individual contributors and leaders within Cybersecurity and Technology, and occasionally senior leaders within Cybersecurity. Determines and develops approach to solutions. Work is accomplished with periodic check-ins for alignment and limited direction. Work is evaluated upon completion to ensure objectives have been met. Proficient ability to use multiple Cybersecurity tools, specific to function.

Manager Responsibilities

No supervisory responsibilities.

Education and Exp erience Required

Bachelor's degree and a minimum of 3 years' relevant work experience, or in lieu of a degree, a combined minimum of 7 years' higher education and/or work experience

Education and Experience Preferred

Intermediate understanding of the security system development and infrastructure lifecycle and architecture, and systems design

Proven experience with the tools utilized in assigned Cybersecurity function

Experience translating architecture into technical requirements.

Proficient level of critical thinking and problem solving

Excellent written and verbal communication skills

Proven experience collaborating with leaders to execute results.

Prior experience seeking buy-in of others to align on processes.

Ability to analyze and draw conclusions based on quantitative data from multiple sources.

M&T Bank is committed to fair, competitive, and market-informed pay for our employees. The pay range for this position is $97,100.00 - $161,800.00 Annual (USD). The successful candidate's par