Sr Engineer - Cyber Security

Ally-Financial; Charlotte (NC); Hybrid; USD 120,000 - 160,000; Full time

Job summary

Ally Financial is seeking a cybersecurity specialist to lead NAC strategy, policy development, and firewall optimization. You will work with IT and security teams on monitoring, reporting, and remediation efforts.

The role emphasizes hands-on experience with NAC systems, firewalls, and cloud security, with a hybrid work arrangement and opportunities for growth within Ally's security programs.

Qualifications

• Bachelor's degree or 3 years related experience in computer science or engineering.
• At least 3 years in routing, switching, VLAN, VPN, and cloud security.
• 3 years of network access control experience (Cisco/ForeScout).
• 3 years maintaining firewall and threat-prevention rules and policies.
• 2 years supporting cloud firewalls and security groups.
• Experience with packet captures and OSI model understanding.
• Proficient in programming/scripting (Python, Go, Java, etc.).

Responsibilities

• Provide leadership on NAC strategy, policy, monitoring, and reporting.
• Develop and enhance NAC and firewall policies based on security needs.
• Ensure compliance with cybersecurity standards and regulations.
• Troubleshoot and optimize NAC, Palo Alto, VPN, and cloud firewalls.
• Manage day-to-day security changes, audit requests, and rule bases.
• Identify risks and coordinate remediation with security teams.

Skills

Routing & Switching

802.1x & VLAN

VPN & Cloud Security

Network Access Control

Firewalls & Threat Prevention

Packet Analysis

OSI Model

Scripting (Python/Go/Java)

Education

Bachelor's Degree in CS/Engineering or related field

Tools

Cisco

ForeScout

Job description

Ally and Your Career Ally Financial only succeeds when its people do - and that's more than some cliché people put on job postings. We love this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You're constantly evolving, so shouldn't your opportunities be, too?

Work Schedule

Ally designates roles as (1) fully on-site, (2) hybrid, or (3) fully remote. Hybrid roles are generally expected to be in the office a certain number of days per week as indicated by your manager. Your hiring manager will discuss this role's specific work requirements with you during the hiring process. All work requirements are subject to change at any time based on leader discretion and/or business need.

Duties

• Provide thought leadership on Network Access Control System strategy, policy, monitoring, alerting, reporting, and blocking.
• Provide subject matter expertise to management, business areas, and IT Teams as well as develop and enhance NAC and Firewall policies based on Network Security.
• Cybersecurity Standards, regulatory requirements and analysis of business processes and workflows.
• Provide expert level troubleshooting and a great understanding of the technology features related to NAC, Palo Alto Firewalls, Threat Prevention, VPN and cloud firewalls, security groups.
• Manage day to day activities such as security related changes, documentation, audit requests and rule base optimization of firewalls, network access control and other security controls.
• Identify security risks and work with security and partner teams to report and lead the remediation efforts.

Requirements

• Bachelor's Degree in Computer Science, Computer Information Science, Engineering or related field or Three (3) years of experience in a related occupation.
• Skills: Experience must include:
  • 3 years of experience with Routing, Switching, 802.1x, VLAN, VPN, LAN, WAN, network, cloud Security;
  • 3 years of experience with Network access control (Cisco or ForeScout);
  • 3 years of experience in Maintaining Firewalls & Threat Prevention rules, signatures and policies;
  • 3 years of experience in Maintaining Network Access Control systems;
  • 2 years of experience supporting, maintaining cloud firewalls, security groups;
  • Experience with packet captures and solid troubleshooting skills, including reading packet captures;
  • Experience with OSI Model and demonstrate how each layer works;
  • Experience programming/scripting languages (e.g., Python, Go, Java, etc.).

Other

• This is a hybrid position whereby the employee will work both from home and from the aforementioned office address. Hence, the employee must live within a reasonable commuting distance of the aforementioned office address.
• This position does not require travel.
• If offered employment must have legal right to work in U.S.

Who We Are

Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

In accordance with the Americans with Disabilities Act, if after review of the position expectations, you believe that you may need a medical accommodation to fulfill the duties of this role, please email [e-mail] with details of your accommodation request.

We all work better as allies. Join a team that thrives on doing it right - whether we're helping people live their best financial lives or helping each other grow in our careers.

Here, you'll find people who care about doing work that matters and making an impact in the communities we serve. Good enough is never enough for us - we're always looking for ways to be better, together.

CCPA Notice