Note: The job is a remote job and is open to candidates in USA. Federal Reserve Bank of Boston is seeking a Senior Cyber Security Engineer to ensure the security and integrity of the FedNow organization across people, operations, and technology. The role involves supporting security engineering and operations while providing cybersecurity expertise through both consultation and hands-on technical activities.
Responsibilities
- Develop code to automate security configuration management
- Build, test, and deploy cybersecurity relevant technical solutions
- Support security investigations through data analysis and information gathering
- Build tooling to conduct pro-active hunting for malicious activity impacting FedNow holistically
- Represent a technologists point of view in selecting tooling and solutions
- Participate in agile activities with geographically dispersed agile delivery teams
- Proven ability to collaborate, build relationships and influence direct team members in a matrix-management environment
- Provide informal guidance, direction and/or oversight to less experienced colleagues
- Actively seek to remove barriers and improve security across the program
- Document technical solutions developed and the supporting processes
- Strong interest in current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape
- Identify and address the root causes of issues, focusing on solving problem categories rather than individual instances. Engage early and comprehensively
- Lead and execute cyber incident response activities, including detection, analysis, containment, eradication, and recovery
- Ability to program or script in Bash, Python, Java, or Go
- Ability to utilize tools like CI/CD Automation similar to TravisCI, CircleCI, Github Action, Gitlab Pipelines or AWS CodeDeploy
- Expertise with Cloud IAM Configuration, Container Orchestration, and Log Management
- Ability to rapidly produce proof-of-concept code to demonstrate potential solutions
- Knowledge of, and experience with, cloud computing technology
- Knowledge of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, operating systems, databases, and other technologies
- Knowledge and experience normally acquired through, or equivalent to, the completion of a Computer Science or Computer Engineering Bachelors degree with a minimum of 5-7 years of job-related experience
- Strong communication skills with ability to influence at all levels of the organization; ability to simplify complex security topics for consumption and critical decision making
- Proven experience as a Cyber Incident Response Analyst/Engineer, with a focus on senior-level responsibilities
- Deep understanding of cyber threats, vulnerabilities, and attack vectors
- Strong analytical and problem-solving skills
- Relevant certifications (e.g., CISSP, CISM, GIAC, AWS, AZURE)
- Experience working in a software development environment
- Knowledge of cloud security best practices
Skills
- Develop code to automate security configuration management
- Build, test, and deploy cybersecurity relevant technical solutions
- Support security investigations through data analysis and information gathering
- Build tooling to conduct pro-active hunting for malicious activity impacting FedNow holistically
- Represent a technologists point of view in selecting tooling and solutions
- Participate in agile activities with geographically dispersed agile delivery teams
- Proven ability to collaborate, build relationships and influence direct team members in a matrix-management environment
- Provide informal guidance, direction and/or oversight to less experienced colleagues
- Actively seek to remove barriers and improve security across the program
- Document technical solutions developed and the supporting processes
- Strong interest in current security threats, techniques, and landscape, as well as a dedicated and self-driven desire to research current information security landscape
- Identify and address the root causes of issues, focusing on solving problem categories rather than individual instances. Engage early and comprehensively
- Lead and execute cyber incident response activities, including detection, analysis, containment, eradication, and recovery
- Ability to program or script in Bash, Python, Java, or Go
- Ability to utilize tools like CI/CD Automation similar to TravisCI, CircleCI, Github Action, Gitlab Pipelines or AWS CodeDeploy
- Expertise with Cloud IAM Configuration, Container Orchestration, and Log Management
- Ability to rapidly produce proof-of-concept code to demonstrate potential solutions
- Knowledge of, and experience with, cloud computing technology
- Knowledge of IT Infrastructure designs, technologies, products, and services. This should include knowledge of networking protocols, operating systems, databases, and other technologies
- Knowledge and experience normally acquired through, or equivalent to, the completion of a Computer Science or Computer Engineering Bachelors degree with a minimum of 5-7 years of job-related experience
- Strong communication skills with ability to influence at all levels of the organization; ability to simplify complex security topics for consumption and critical decision making
- Proven experience as a Cyber Incident Response Analyst/Engineer, with a focus on senior-level responsibilities
- Deep understanding of cyber threats, vulnerabilities, and attack vectors
- Strong analytical and problem-solving skills
- Relevant certifications (e.g., CISSP, CISM, GIAC, AWS, AZURE)
- Experience working in a software development environment
- Knowledge of cloud security best practices
- The ability to obtain security clearance
- Federal Reserve System candidates will remain employed at current Federal Reserve Bank, but report into the FedNow team via cross-district arrangement
- Be able to support on-call and work-rotation activities
- All applicants must have resided in the United States for at least three (3) years
Benefits
- This job is eligible for remote work within the United States. Proximity to one of our 12 Districts is highly preferred. You may be required to attend in-person meetings and other events as business needs dictate. Remote work flexibility is contingent upon local district approval and business needs.
- The Boston Fed believes in salary transparency.
- The final salary and offer will be determined by the applicant’s background, skills, internal equity, and alignment with market data.
- Be able to support on-call and work-rotation activities
- All employees assigned to this position will be subject to FBI fingerprint/ criminal background and Patriot Act/ Office of Foreign Assets Control (OFAC) watch list checks at least once every five years.
- For this job, any offer of employment is contingent upon successfully passing a two-phase security screening. The first phase consists of the satisfactory completion of a physical examination (including a drug screening), reference checks, and a security investigation consisting of credit and criminal history checks.
- The second phase, which might not be complete until after you begin working at the Reserve Bank, is an additional risk-based security screening determined by the risk rating of the position. Depending upon the sensitivity of the position, this phase may include, and is not limited to, work and residency eligibility verification, and personal interviews with the candidate, references, and prior employers.
- All applicants must have resided in the United States for at least three (3) years
Company Overview