FedNow Senior Cyber Security Engineer

Federal Reserve Bank of Boston is dedicated to delivering a suite of payments services to financial institutions. The FedNow Senior Cyber Security Engineer will be responsible for ensuring the security and integrity of the FedNow organization across people, operations, and technology, providing cybersecurity expertise through consultation and hands-on technical activities.

Responsibilities:

• Develop code to automate security configuration management
• Build, test, and deploy cybersecurity relevant technical solutions
• Support security investigations through data analysis and information gathering
• Build tooling to conduct pro-active hunting for malicious activity impacting FedNow holistically
• Represent a technologists point of view in selecting tooling and solutions
• Participate in agile activities with geographically dispersed agile delivery teams
• Proven ability to collaborate, build relationships and influence direct team members in a matrix-management environment
• Provide informal guidance, direction and/or oversight to less experienced colleagues
• Actively seek to remove barriers and improve security across the program
• Document technical solutions developed and the supporting processes
• Strong interest in current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape
• Identify and address the root causes of issues, focusing on solving problem categories rather than individual instances. Engage early and comprehensively
• Lead and execute cyber incident response activities, including detection, analysis, containment, eradication, and recovery
• Ability to program or script in Bash, Python, Java, or Go
• Ability to utilize tools like CI/CD Automation similar to TravisCI, CircleCI, Github Action, Gitlab Pipelines or AWS CodeDeploy
• Expertise with Cloud IAM Configuration, Container Orchestration, and Log Management
• Ability to rapidly produce proof-of-concept code to demonstrate potential solutions
• Knowledge of, and experience with, cloud computing technology
• Knowledge of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, operating systems, databases, and other technologies
• Knowledge and experience normally acquired through, or equivalent to, the completion of a Computer Science or Computer Engineering Bachelors degree with a minimum of 5-7 years of job-related experience
• Strong communication skills with ability to influence at all levels of the organization; ability to simplify complex security topics for consumption and critical decision making
• Proven experience as a Cyber Incident Response Analyst/Engineer, with a focus on senior-level responsibilities
• Deep understanding of cyber threats, vulnerabilities, and attack vectors
• Strong analytical and problem-solving skills
• Relevant certifications (e.g., CISSP, CISM, GIAC, AWS, AZURE)
• Experience working in a software development environment
• Knowledge of cloud security best practices

Requirements:

• Develop code to automate security configuration management
• Build, test, and deploy cybersecurity relevant technical solutions
• Support security investigations through data analysis and information gathering
• Build tooling to conduct pro-active hunting for malicious activity impacting FedNow holistically
• Represent a technologists point of view in selecting tooling and solutions
• Participate in agile activities with geographically dispersed agile delivery teams
• Proven ability to collaborate, build relationships and influence direct team members in a matrix-management environment
• Provide informal guidance, direction and/or oversight to less experienced colleagues
• Actively seek to remove barriers and improve security across the program
• Document technical solutions developed and the supporting processes
• Strong interest in current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape
• Identify and address the root causes of issues, focusing on solving problem categories rather than individual instances. Engage early and comprehensively
• Lead and execute cyber incident response activities, including detection, analysis, containment, eradication, and recovery
• Ability to program or script in Bash, Python, Java, or Go
• Ability to utilize tools like CI/CD Automation similar to TravisCI, CircleCI, Github Action, Gitlab Pipelines or AWS CodeDeploy
• Expertise with Cloud IAM Configuration, Container Orchestration, and Log Management
• Ability to rapidly produce proof-of-concept code to demonstrate potential solutions
• Knowledge of, and experience with, cloud computing technology
• Knowledge of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, operating systems, databases, and other technologies
• Knowledge and experience normally acquired through, or equivalent to, the completion of a Computer Science or Computer Engineering Bachelors degree with a minimum of 5-7 years of job-related experience
• Strong communication skills with ability to influence at all levels of the organization; ability to simplify complex security topics for consumption and critical decision making
• Proven experience as a Cyber Incident Response Analyst/Engineer, with a focus on senior-level responsibilities
• Deep understanding of cyber threats, vulnerabilities, and attack vectors
• Strong analytical and problem-solving skills
• Relevant certifications (e.g., CISSP, CISM, GIAC, AWS, AZURE)
• Experience working in a software development environment
• Knowledge of cloud security best practices
• The ability to obtain security clearance
• Federal Reserve System candidates will remain employed at current Federal Reserve Bank, but report into the FedNow team via cross-district arrangement
• Be able to support on-call and work-rotation activities
• All employees assigned to this position will be subject to FBI fingerprint/ criminal background and Patriot Act/ Office of Foreign Assets Control (OFAC) watch list checks at least once every five years
• All applicants must have resided in the United States for at least three (3) years