Cyber Security Engineer Principal
Share
Job Location:
Boston, NH - USA
Monthly Salary:
$ 170200 - 255200
Posted on:
2 days ago
Vacancies:
1 Vacancy
Job Summary
Company
Federal Reserve Bank of BostonFederal Reserve Financial Services (FRFS) delivers a suite of payments services to financial institutions via FedLine Solutions Fedwire Funds and Securities the National Settlement Service (NSS) FedCash1 FedACH Check Services and the FedNow Service. FRFS operates as a fully integrated organization with groups dedicated to customer experience operations technology product and customer/industry management enterprise services payments system improvement and one focused on the ongoing growth and development of the FedNow instant payment service. Our strategy defines our future direction seeking to offer a fully integrated product suite that provides speed resilience and choice in meeting the payments needs of FRFS customers across the United States. Through our Enterprise structure we strive to meet the needs of the marketplace for new products and services with speed and agility seek to provide a robust and unified customer experience and work to create career growth opportunities for FRFS staff.The FRFS Enterprise operates with a customer-first mindset comprised of team members seeking to do the best work of their careers in pursuit of our important central bank mission.
The position will be primarily on-site with residency commutable to one of our offices required.
This positionis responsible forhelping to ensure the security and integrity of theFedNoworganization across people operations and technology. This individual will directly support securityengineeringand operations. The individual will also be expected to provide cybersecurityexpertiseboth through consultation and hands-on technical activities.
Desired Qualifications
Programming Languages relevant to web and API development such as Python JavaGO is
Experience security testing cloud workloads.
Strong understanding of web serviceprotocolsREST principles and client-server architecture is necessary
Strong understanding of APIdefense strategies and ability to implement
Foundationalunderstanding of logging andmonitoring tools to detect anomalies and respond to incidents in real-time
Strong attention to detail and creative problem-solvingare essential for navigating complex security challenges
Abilityto effectively communicaterisks and solutions to both technical and non-technical stakeholders
Collaboratingeffectivelywithin a teamincludingdevelopers platform architects and project managers in a multi-district environment
What will be expected of you
Develop code to automate securityframeworksinto functional secure infrastructure and deploysecuritytoolingusing automationas a foundation.
Design and execute point-in-time security tests automated or manually against cloud workloads.
DevSecOpsintegration enable automate static and dynamic API security checks using CI/CD tools. Enforce governance gates during key lifecycle phases (eg.DesignValidate Publish)
Partner with application security and platform teams to embed security into API design development and deployment.
Contribute to security architecture reviews threat modelingand technical design discussions
Define configure and enforce API gateway policies for authentication authorization encryption and traffic-management controls
Monitor traffic and collaborate withsecurityand engineering teams on incident response and remediation
Represent a technologists point of view in selecting tooling and solutions.
Proven ability to collaborate build relationships and influence direct& in-directteam members in a matrix-management environment.
Present and debrief cybersecurity findings risk posture and control effectiveness to leadership and management audiences translating technical security data into clear actionable insights to support informed decision-making.Activelyseekto remove barriers and improve security across the program.
Documenttechnicalsolutions developed andthesupporting processes.
Identifyand address the root causes of issues focusing on solving problem categories rather than individual instances. Engage early and comprehensively.
Expertiseyou would bring
5years of experience in an object-oriented language (Python Java or Go preferably)
Experience working in aDevSecOpssoftware development environment
5 years of experience in Cyber Security with a focus on API gateway engineering
5years of Cloud Native experience (AWS preferred)
Strong understanding of API Security OWASP API Top 10 secure API design principles
Exposure to API gateway security tools (runtime protection discovery orposture mgmt.)
Proficiencyin working with Infrastructure as Code (i.eTerraformPulumi)
Proven experience building and securing CI/CD pipelines(GitHub GitLab CI Jenkins etc.)
Proficiencywith container technologies (Docker Kubernetes) and their security implications
Expertisewith Cloud IAMconfiguration/policiescontainerorchestration/testing
Lead and execute cyber incident response activities including detection analysis containment eradication and recoverywith a focus on senior-levelresponsibilities.
Strong communicationskills with ability to influence at all levels of the organization; ability to simplify complex security topics for consumption and critical decision making
Logistics and Requirements
The ability to obtainsecurityclearance
Be able to support on-call andwork-rotation activities
Relevant certifications (e.g. CISSP CISM GIAC AWS AZURE).
Federal Reserve System candidates will remain employed at current Federal Reserve Bank but report into theFedNowteam via cross-district arrangement.
The salary range for this position is $170200 - $212700 - $255200. The Boston Fed believes in salary transparency. The final salary and offer will be determined by the applicants background skills internal equity and alignment with market data. Whether youre developing into the job or are a more seasoned candidate we aim to pay competitively.
All employees assigned to this position will be subject to FBI fingerprint/ criminal background and Patriot Act/ Office of Foreign Assets Control (OFAC) watch list checks at least once every five years.The above statements are intended to describe the general nature and level of work required of this position. They are not intended to be an exhaustive list of all duties responsibilities or skills associated with this position or thepersonnelclassified. While this job description is intended to bean accuratereflection of this position management reserves the right to revise this or any job description at its discretion at any time.
The Federal Reserve System is committed to a diverse and inclusive workplace and toprovideequal employment opportunities to all persons without regard to race color religion national origin sex sexual orientation gender identity age genetic information disability or military service.
All employees assigned to this position will be subject to FBI fingerprint/ criminal background and Patriot Act/ Office of Foreign Assets Control (OFAC) watch list checks at least once every five years.
The above statements are intended to describe the general nature and level of work required of this position. They are not intended to be an exhaustive list of all duties responsibilities or skills associated with this position or thepersonnelclassified. While this job description is intended to bean accuratereflection of this position management reserves the right to revise this or any job description at its discretion at any time.
For this job any offer of employment is contingent upon successfully passing a two-phase security screening. The first phase consists of the satisfactory completion of a physical examination (including a drug screening) reference checks and a security investigation consisting of credit and criminal history checks.
The second phase which might not be complete until after you begin working at the Reserve Bank is anadditionalrisk-based security screeningdeterminedby the risk rating of the position. Depending upon the sensitivity of the position this phase may include and is not limited to work and residency eligibility verification and personal interviews with the candidate references and prior employers.
All applicants must haveresidedin the United States for at least three (3) years
Full Time / Part Time
Full timeRegular / Temporary
RegularJob Exempt (Yes / No)
YesJob Category
Information Technology Family GroupWork Shift
First (United States of America)The Federal Reserve Banks are committed to equal employment opportunity for employees and job applicants in compliance with applicable law and to an environment where employees are valued for their differences.
Always verify and apply to jobs on Federal Reserve System Careers ( or through verified Federal Reserve Bank social media channels.
Required Experience:
IC
About Company
One of 12 regional banks in the Federal Reserve System, the Federal Reserve Bank of Kansas City oversees system member banks and bank holding companies in Colorado, Kansas, Nebraska, northern New Mexico, Oklahoma, western Missouri, and Wyoming. The bank also has branch offices in Denv ... View more
