Cyber Security Engineer – Remote

Career area

Technology

Work Location(s)

500 Woodward Avenue, Detroit, MI, 601 S. Tryon Street, Charlotte, NC

Remote?

Yes

Ref #

11147

Posted Date

Thursday, February 10, 2022

Working time

Full-time

Ally and Your Career

Ally Financial only succeeds when its people do – and that’s more than some cliché people put on job postings. We live this stuff! We see our people as, well, people – with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. You’re constantly evolving, so shouldn’t your opportunities be, too?

The Opportunity

At Ally, you get a startup feel, but experience the benefits of a company that’s worked out the kinks and is fulfilling its purpose. We’re always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions.
The Cyber Security Technology key and certificate engineer position at Ally is a member of the Information Protection and Risk Management (IPRM) team and reports to a Director of Cyber Security Technology. The Engineer works with a team to design and implement technical controls and tools to meet specific security requirements and defines processes and standards to ensure that security configurations and tools are maintained.
As part of this role the successful candidate will work directly with our product management and IT development teams on complex bug and feature support along with working with our senior operations engineers on deployment and integration tasks.

The Work Itself

The Cyber Security Technology (CST) engineer is a subject matter expert (SME) in engineering solutions for Ally’s public key infrastructure (PKI), specifically key and certificate management. Under direction from the Director and in line with stated strategic objectives, the CST Engineer will conduct industry research, explore the products available on the market to meet the requirements, OR devise a plan to build a solution internally. The CST PKI engineer will assist management in creating business cases to obtain project funding and will work with project managers and other engineers to successfully implement projects on time and on budget. The engineer will also be responsible for ongoing incremental engineering required to continuously achieve the best coverage and operation of the technology, and as the SME, will assist in troubleshooting system degradations and outages if required. Some (but not all) of the primary responsibilities the role will be primarily involved with are as follows: All engineering aspects of the company’s Public Key Infrastructure (PKI) including: Enterprise Key Management (EKM) platforms, with primary experience with the Thales SafeNet KeySecure and Thales Cipher Trust Hardware Security Module (HSM) architecture and engineering services Internally and externally hosted Certification Authorities (CAs) and Registration Authorities Consulting around cryptographic technologies Influence the direction of the PKI security roadmaps by proactively looking forward on security gaps that require planning Assist in the Design, test, implement changes/additions to the Venafi key and certificate management infrastructures Build partnership with stakeholders and management up to date with status of major deliverables and sustain strong working relationships with business partners, peers, and agile members to enhance business value. Participate in planning, backlog management, and other agile ceremonies with Scrum Masters. Interface with vendors that provide security/encryption related services to the bank Lead the definition and implementation of POCs around PKI and other certificate related technologies Ability to create and maintain system documentation for PKI technologies, including installation, configuration, and appropriate troubleshooting steps.

The Skills You Bring

Skills and Qualifications Bachelor’s degree in relevant technical field or required experience 3+ years of related experience Strong Cyber Security experience in PKI and Cryptography methods both on premise and cloud Strong communication skills, including executive communication to Sr. leadership Strong experience with PKI tools like the following: Certificate Authority providers (e.g., Microsoft CA, Entrust) Key and Certificate Management Platforms (Venafi) HSMs – specifically SafeNet Luna HSMs and Enterprise Key Managers (EKM) PKIs – specifically Microsoft ADCS and Entrust MSO Knowledge of industry-standard cyber security frameworks, policies, and procedures (ISO27001, NIST, CIS, etc.) Security certifications (CEH, CCSP, CISSP, OSCP) are also a plus
Preferred Qualifications Must be willing to work after-hours and weekends when technical issues arise which require immediate resolution. Knowledge and experience creating and maintaining policies, standard operating procedures (SOPs) and technical documents Strong knowledge of current cyber security threats and techniques, as well as a dedicated and self-driven desire to research current cyber security products. Experience gathering and facilitating the development of business and system requirements within a broader project team. Excellent problem-solving and troubleshooting skills with a strong attention to detail. A strong customer/client focus with ability to manage expectations appropriately and provide superior customer/client experience and build long-term relationships. Ability to work independently with minimal supervision, with an ability to make independent decisions when appropriate. Excellent oral and written communications skills.

How We’ll Have Your Back

Ally’s compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. But Ally’s total compensation – or total rewards – extends beyond your paycheck and is designed to support and enrich your personal and professional life, including: Starting Pay: The starting pay for this role is $90,000 per year. In addition, this role is eligible for an annual bonus program with a target of 7% of annual base pay, based on individual and corporate performance. This is the starting pay for this role. Actual offers to be negotiated based on applicant’s qualifications and experience.
Time Away: competitive holiday and flexible paid-time-off, including time off for volunteering and voting.
Planning for the Future: plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan and 529 educational assistance programs, tuition reimbursement, and other financial well-being programs.
Supporting your Health & Well-being: flexible health and insurance options including dental and vision, pre-tax Health Savings Account with employer contributions and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
Building a Family: adoption, surrogacy, and fertility support as well as parental and caregiver leave, back-up child and adult/elder day care program and childcare discounts.
Work-Life Integration: other benefits including LifeMatters® Employee Assistance Program, subsidized and discounted Weight Watchers® program and other employee discount programs.

Who We Are:
Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on “Doing it Right” and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.
Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.
Where permitted by applicable law, must have received or be willing to receive the COVID-19 vaccine by date of hire to be considered, if not currently employed by Ally.
We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at [email protected]. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.