Principal Information Security Platform Engineer

We do the right things, right now.
We do them in a way that is relevant to our clients.
Become a part of our history as it continues to be written! If you are interested and qualified for this role, we invite you to apply.
The Principal Information Security (IS) Platform Engineer is responsible for designing, implementing, and maintaining secure platforms with a strong emphasis on protecting sensitive information and preventing data loss within the organization.
The incumbent will be an integral part of the Information Security team and partner with key stakeholders to identify potential risks, design and implement DLP solutions, and assist with the engineering of other security platforms (ex.
Web Gateways and Web Application Firewalls).
The Principal IS Platform Engineer is expected to stay up to date with the latest industry trends and technologies, conduct periodic risk assessments, and provide training and guidance to associates on data protection best practices.
The incumbent will also be expected to monitor and analyze data security incidents, investigate breaches, and develop incident response plans to mitigate future risks.
Essential Functions/Responsibilities
• Design and implement DLP solutions to monitor, detect, and prevent data leaks across endpoints, networks, and cloud environments.
• Integrate DLP policies into existing infrastructure and workflows, ensuring minimal disruption to business processes.
• Drive technology requirements:
engineer and tune alerts generated from DLP systems and other technologies.
• Regularly audit DLP rules to improve accuracy across systems and minimize false positives through use of technology and data analytics.
• Identify governance, process and data loss resiliency improvement areas; propose and implement changes to eliminate redundant work by leveraging automation.
• Perform analysis and remediation of data loss events.
• Analyze event metrics to inform and enhance company's security posture and improve existing monitoring and response processes.
• Configure, manage, and optimize web gateways to monitor and filter web traffic for malware, phishing, and unauthorized data exfiltration.
• Implement policy-based web filtering policies and real-time threat detection mechanisms for web traffic control.
• Implement, configure, and monitor cloud web application firewall to protect web applications.
• Collaborate with application developers to configure and optimize WAF rules, ensuring appropriate coverage and effective protection without functionality or performance impact.
• Create and maintain security controls for on prem and cloud-based infrastructure in alignment with FFB's enterprise requirements.
• Work closely with the threat management team to respond to potential or real high-risk threats.
Minimum Knowledge, Skills, and Abilities Needed to Perform Essential Functions of the Job
• Bachelor of Science degree in Information Technology or related field or equivalent experience.
• Strong hands-on experience with DLP tools and technologies, including overseeing and implementing security solutions within cloud ecosystems.
• Comprehensive expertise in end-to-end DLP management
• Experience with Web Gateways.
• Experience managing and configuring cloud web application firewalls.
• Experience with supporting cloud computing platforms (more Azure preferred).
• Knowledge of business concepts, tools and processes that are needed for making sound decisions in the context of the business.
• An applied understanding of relevant and emerging technologies and an ability to embed learning and innovation in the day-to-day.
• 5-7+ years of experience with emphasis on cybersecurity, or equivalent combination of education and experience.
• Experience uApply here:
***/?adid=YmJnZW5lcmljLjIyNjg4LjEwNTA4QGJhbmthdGZpcnN0Y29tcC5hcGxpdHJhay5jb20