Cybersecurity Firewall Engineer

Responsible for designing and implementing small-scale security systems and solutions to develop or enhance new or existing security solutions, solving basic to moderate problems or enhancements. Completes day-to-day support activities and special projects.

• Design components of security solutions with moderate complexity and risk, ensuring alignment with cybersecurity objectives and organizational needs.
• Configure security features for security tools with guidance from more senior engineers, to ensure systems align with cybersecurity objectives.
• Conduct functional testing of security systems and configurations, reporting findings to more senior engineers to align on appropriate actions to take.
• Deploy security systems and code for moderately complex initiatives, with guidance from more senior engineers.
• Identify and implement tuning to security systems to enhance effectiveness of systems and configuration.
• Automate security systems' installation, configuration, and processes to reduce manual effort on repetitive tasks.
• Collaborate across Cybersecurity organization and with key Technology partners to integrate security solutions.
• Identify areas of opportunities in daily tasks to improve security solutions and seeks opportunities to learn new technologies and methodologies.
• Communicate with vendors by collecting and providing relevant data to contribute to troubleshooting processes.
• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

• This role is used in one or more of the following cybersecurity function:
  • Data Loss Prevention Engineering – designs and implements strategies and technologies to prevent unauthorized access, transmission, or leakage of data within and outside of the Bank's network and systems.
  • Detection Engineering – develops and deploys systems and processes to identify and respond to cybersecurity threats and incidents in real-time, aiming to minimize the impact of security events.
  • Identity and Access Engineering – develops and manages the architecture, automation, and control mechanisms for provisioning of least privilege access for employees and contractors to internal and 3rd party systems, applications, and data sources.
  • Security & Network Infrastructure – designs and implements secure network architecture, protocols, and technologies to protect data in transit, prevent unauthorized access, and detect and mitigate network-based attacks.  Architects, maintains, and optimizes the tools and capabilities leveraged by cyber security to achieve organizational objectives.
  • Protection Engineering – designs and implements security strategies, systems, policies, and procedures that proactively protect against cybersecurity threats and malicious activities targeting the Bank's systems and assets.
  • Cloud Engineering – designs and implements the security of the organization’s cloud computing environment to protect against cybersecurity threats and malicious activities.

• Partners primarily with individual contributors and leaders within Cybersecurity and Technology
• Leverages established directions, policies, and guidelines to accomplish work. Work is reviewed for accuracy and overall quality.
• Working knowledge of multiple, and proficiency with at least one Cyber tool, specific to function

No supervisory responsibilities

• Bachelor's degree and a minimum of 2 years’ relevant work experience, or in lieu of a degree, a combined minimum of 6 years’ higher education and/or work experience

• Intermediate understanding of system development and infrastructure lifecycle, and systems design
• Strong understanding of tools utilized in assigned Cybersecurity function
• Experience translating architecture into technical requirements.
• Proven experience thinking critically and solving problems
• Strong written and verbal communication skills
• Ability to collaborate effectively with all levels of employees and business partners across the organization.
• Ability to analyze moderate-sized datasets independently and draw straightforward conclusions.