U.S. Bank is seeking an experienced Network Security Engineer with demonstrated competence and thought leadership with capability to contribute toward the success of our technology initiatives. The Senior Network Security Engineer will be primarily responsible for implementing and supporting security solutions and technologies to help protect the organization’s systems from unauthorized access, use, disclosure, destruction, modification, or disruption.

Responsible for the delivery of security tools that meet the highest standards. Provides technical leadership, security guidance on security projects. Sets security design guidelines, frameworks, and models. Works to identify new security issues and risks and is involved in developing mitigation plans. Helps identify and document security objectives.

Trains/mentors members of the team. Builds relationships and trust across the organization. Evaluates and recommends new and emerging security products and technologies. Works to develop and interpret security policies and procedures. Leads the building, deployment, and maintenance of enterprise security tools/controls. Proactively seeks solutions to mitigate risk and clearly communicate risks to the appropriate stakeholders.

The role offers a hybrid/flexible schedule, which means there’s an in-office expectation of 3 or more days per week and the flexibility to work outside the office location for the other days at one of the following locations:

• Cincinnati, OH
• Minneapolis, MN
• Charlotte, NC
• Washington, DC
• Atlanta, GA
• Denver, CO

Required Skills

• 6+ years of proven success in a similar security, network, development or operations roles.
• Strong operational/engineering experience with Firewalls or Web Application Firewalls (Akamai, Cloudflare or F5). -Strong operational/engineering experience with forward/reverse proxies.
• A strong understanding of tiered defense security design.
• Strong technical knowledge of security/network engineering and operations (DDoS).
• Strong knowledge of networking concepts and technologies.
• Confident ability to recognize security events of interest that may require improved detection/alerting capabilities.
• Effectively communicate technical information to non-technical audiences and influence others to comply with policies/conform to standards and best practices.
• Strong attention to detail and process. Ideal Skills -Background in application development along with strong networking skills.
• Demonstrated expertise with network or application security.
• Experience with process/test automation, development and/or scripting (i.e. Selenium, RESTful, Java, Python, Power/Unix Shell, etc.) a plus. -Understanding of PCI DSS requirements and how those mesh with application and network security. -Experience presenting materials and evidence with internal/external auditors (e.g. PCI, SOX or regulators).
• CISSP, GIAC, CISA, or other appropriate certifications a plus but not required