Cybersecurity Cloud Security Engineer

$79,158 - $131,929/Yr

M&T Bank - Buffalo, NY

Full-time

Buffalo, NY

Credit Intermediation and Related Activities

About the position

At M&T Tech, we are a dynamic team of innovators dedicated to creating advanced technology solutions in the banking sector. As part of the Cloud Security Engineering team, your primary focus will be on Microsoft Azure, where you will play a vital role in safeguarding our cloud-based systems and data. This position requires close collaboration with IT, DevOps, and Security teams to implement and manage security measures, respond to incidents, and ensure compliance with industry standards and best practices. Your contributions will be essential in delivering and supporting the foundational security technology utilized by M&T Bank within our Cloud Service Provider environments. We are committed to delivering innovative and compelling technology solutions that enhance the internal customer experience, enabling our business partners to excel in their roles. In this role, you will be responsible for designing, implementing, and maintaining security solutions in Microsoft Azure. You will conduct security assessments and audits of Azure environments, develop and enforce security policies, procedures, and standards, and monitor security alerts while managing incident responses for Azure-related security events. Collaboration with DevOps teams will be crucial as you integrate security best practices into the CI/CD pipeline. You will also implement and manage Azure security services such as Azure Security Center, Azure Sentinel, and Azure Key Vault, while staying updated with the latest security trends, threats, and technologies. Ensuring compliance with relevant regulations and standards, such as GDPR, HIPAA, and ISO 27001, will be a key aspect of your responsibilities. Additionally, you will draft support documentation, technical standards, and operational processes for an evolving application delivery environment. Your role will involve assisting in establishing, optimizing, and enhancing regulatory and compliance processes, as well as continuously learning to remain current with evolving application delivery best practices. You will complete technical security deliverables on assigned projects and work closely with the Product Owner, Scrum Master, and key participants to ensure that efforts are appropriately resourced to meet deadlines and budgets. The ability to work independently while also collaborating as part of a high-functioning team is essential for success in this position.

Responsibilities

• Design, implement, and maintain security solutions in Microsoft Azure.
• Conduct security assessments and audits of Azure environments.
• Develop and enforce security policies, procedures, and standards.
• Monitor security alerts and manage incident response for Azure-related security events.
• Collaborate with DevOps teams to integrate security best practices into the CI/CD pipeline.
• Implement and manage Azure security services such as Azure Security Center, Azure Sentinel, and Azure Key Vault.
• Stay updated with the latest security trends, threats, and technologies.
• Ensure compliance with relevant regulations and standards (e.g., GDPR, HIPAA, ISO 27001).
• Draft support documentation, technical standards, and operational processes for an existing and evolving application delivery environment.
• Assist in establishing, optimizing, and enhancing regulatory and compliance processes.
• Continuously learn and evolve skill set to remain current with evolving application delivery best practices and methods.
• Complete technical security deliverables on assigned projects.
• Work with the Product Owner, Scrum Master, and key participants to ensure efforts are resourced correctly and meet deadlines and budgets.
• Work independently and collaborate as part of a high functioning team.

Requirements

• Combined minimum of 5 years' higher education and/or work experience in systems design, management and/or architecture.
• Intermediate knowledge of Azure networking.
• Experience engineering and implementing solutions servicing large scale deployments in support of near zero down time environments.
• Possess troubleshooting skills in the areas of cloud security, cloud networking and Azure Private DNS.
• Strong communication and teamwork abilities.
• Proficient documentation skills.

Nice-to-haves

• Bachelor's Degree in Information Security, Information Technology, Information Systems Management, Computer Science, Engineering, or related field(s) preferred.
• Minimum 5 years' professional experience in a technical engineering position involving infrastructure design technologies, data management and interchange, system design and/or development for complex applications.
• Ability to translate complex business and functional requirements into structured high quality implementations using any variety of industry standard approaches.
• Experience with Azure security tools and services (Azure Security Center, Azure Sentinel, Azure Key Vault).
• Strong knowledge of networking, firewalls, VPNs, and other security technologies.
• Proficiency in scripting languages such as Terraform/HCL, PowerShell, Azure CLI, or Bash.
• Experience with security frameworks and standards (e.g., NIST, CIS, ISO 27001).
• Relevant certifications such as Azure Security Engineer Associate, CISSP, CISM, or similar are highly desirable.

Benefits

• Competitive salary based on experience and skills.
• Equal Opportunity/Affirmative Action Employer, including disabilities and veterans.