Senior Security Baseline & Compliance Engineer

KeyBank; Brooklyn (OH); On-site; USD 96,000 - 181,000; Full time

Job summary

KeyBank is seeking a Senior Exposure Management Engineer to govern enterprise security baseline standards across on‑premises, cloud, and hybrid environments. You will ensure assets align with CIS Benchmarks, NIST CSF, and regulatory requirements through continuous assessment and risk-based remediation.

You will leverage automated tools like Tenable and ServiceNow to measure compliance, monitor drift, and drive remediation in partnership with Security Architecture, Infrastructure, Cloud, and

Qualifications

• Bachelor’s degree or equivalent experience in computer science or cybersecurity.
• 8+ years in security engineering, configuration management, or related roles.
• Experience with vulnerability management platforms (Tenable, Qualys, Rapid7).
• Cloud experience across AWS, Azure, and Google Cloud.
• Familiarity with CIS Benchmarks, NIST CSF, MITRE ATT&CK, and related security frameworks.

Responsibilities

• Govern enterprise security baseline standards across on-prem, cloud, and hybrid environments.
• Continuous assessment, compliance monitoring, and risk-based remediation activities.
• Collaborate with Security Architecture, Infrastructure, Cloud, and Application teams to drive remediation and reporting.
• Lead evolution of the enterprise baseline program, automation, and actionable reporting.
• Support audit and regulatory examinations and maintain documentation and evidence.

Skills

Vulnerability Management

Configuration Management

Security Engineering

Cloud Platforms

Regulatory Compliance

Documentation & Reporting

Willingness to Travel

Education

Bachelor’s degree in Computer Science or Cybersecurity

Tools

Tenable

Qualys

Rapid7

ServiceNow

AWS

Azure

Google Cloud

Job description

KeyBank is seeking a Senior Exposure Management Engineer to govern enterprise security baseline standards across on‑premises, cloud, and hybrid environments. You will ensure assets align with CIS Benchmarks, NIST CSF, and regulatory requirements through continuous assessment and risk-based remediation.

You will leverage automated tools like Tenable and ServiceNow to measure compliance, monitor drift, and drive remediation in partnership with Security Architecture, Infrastructure, Cloud, and