Associate - Cyber Security

Associate - Infrastructure Security - IN

Professionals in this group engineer, implement and monitor security measures for the protection of physical IT systems, networks and information for the organization infrastructure.

Key Responsibilities and Duties

• They Identify and define system security requirements, networking threats, storage requirements and design computer security architecture.
• They also develop detailed cyber security designs and prepare and document standard operating procedures and protocols to maintain infrastructure security.

Educational Requirements

• University (Degree) Preferred

Work Experience

• No Experience Required

Physical Requirements

• Physical Requirements: Sedentary Work

Career Level

7IC

Position Summary:

The Lead Information Security Engineering job collaborates with various business units and stakeholders across the organization to monitor external and insider threat detection, mitigation, investigation and response efforts. Working under limited supervision, this job develops and implements robust technical solutions and advanced analytics to enable preventive threat detection efforts. This job also conducts and reviews the testing of the current state of the information security architecture and suggests improvement recommendations by gathering key insights found from testing and analyzing the current systems and networks.

KEY RESPONSIBILITIES AND DUTIES:

• Provides operations and engineering support for critical security systems and services including servers, endpoint security, computer forensics, vulnerability/penetration assessment/mitigation, and security event management.

• Leads the cost/benefit evaluation of cloud solutions compared to virtual private networks, dedicated hosting, and in-house solutions.

• Reviews technical feasibility of adopting external cloud based IT platform and infrastructure services within the organization.

• Leads the identification of portions of the organization's IT platform/infrastructure with the highest potential return for cloud deployment.

• Facilitates implementation of the organization's global strategies and initiatives to enhance Information Technology plans, operations and procedures.

• Ensures the execution of vulnerability analysis and exploitation of applications, operating systems and networks.

• Reports identified intrusion or incident paths and methods discovered through testing and evaluation procedures.

• Designs, develops and implements countermeasures, systems integration and tools specific to cyber and information operations.

• Resolves and documents complex malware and intrusion issues within the system as they occur.

• Functions as an internal information security consultant on the standards, complex issues and best practices for the organization.

• Conducts testing and analysis of complex software systems to determine both the functionality and intent of the systems.

• Communicates with cybersecurity risk and security operation teams to enhance the overall security posture of the enterprise.

• Coaches, reviews and delegates work to lower level professionals to enhance their knowledge and performance related to information technology (IT) Security.

QUALIFICATIONS:

Required skills:

• 5 + years of experience in Information Security or IT Technology.

• 3+ years of experience leading complex enterprise-wide integration programs and efforts as an individual contributor.

• 2+ years of self-leadership experience.

• 2+ years of experience writing Python, Rego, YAML, GRAPH (GQL)

• 2+ years of maintaining a CSPM and SSPM tool that assess, detect, and mitigate misconfigurations & vulnerabilities in the cloud. Preferred tools Adaptive shield, Reco.ai, Wiz.io, Sysdig, AWS Config, etc.

• 2+ years of experience working with services in AWS, GCP, OCI, and Azure.

• 2+ years of experience working with Terraform

Preferred Skills:

• 3+ years of experience in Cloud Security and Vulnerability Management.

• 3+ years of experience in writing requirements for security technologies.

• 3+ years of experience designing engineering solutions.

• Security certifications such as CISSP, CISM, CRISC, AWS Security, SANS, etc.

• Excellent verbal, written, and interpersonal communication skills.

• Ability to influence, partners, stakeholders, and senior leadership.

• Strong customer service.

• Ability to leverage AI and machine learning to enhance threat detection, incident response, and security posture within cloud environments.

_____________________________________________________________________________________________________

Company Overview

TIAA Global Capabilities was established in 2016 with a mission to tap into a vast pool of talent, reduce risk by insourcing key platforms and processes, as well as contribute to innovation with a focus on enhancing our technology stack. TIAA Global Capabilities is focused on building a scalable and sustainable organization , with a focus on technology , operations and expanding into the shared services business space.

Working closely with our U.S. colleagues and other partners, our goal is to reduce risk, improve the efficiency of our technology and processes and develop innovative ideas to increase throughput and productivity.

We are an Equal Opportunity Employer. TIAA does not discriminate against any candidate or employee on the basis of age, race, color, national origin, sex, religion, veteran status, disability, sexual orientation, gender identity, or any other legally protected status.

Our Culture of Impact

At TIAA, we're on a mission to build on our 100+ year legacy of delivering for our clients while evolving to meet tomorrow's challenges. We equip our associates with future-focused skills and AI tools that enable us to advance our mission. Together, we are fighting to ensure a more secure financial future for all and for generations to come. We are guided by our values: Champion Our People, Be Client Obsessed, Lead with Integrity, Own It, and Win As One. They influence every decision we make and how we work together to serve our clients every day. We thrive in a collaborative in-office environment where teams work across organizational boundaries with shared purpose, accelerating innovation and delivering meaningful results. Our workplace brings together TIAA and Nuveen's entrepreneurial spirit, where we work hard and work together to create lasting impact. Here, every associate can grow through meaningful learning experiences and development pathways-because when our people succeed, our impact on clients' lives grows stronger.

Accessibility Support

TIAA offers support for those who need assistance with our online application process to provide an equal employment opportunity to all job seekers, including individuals with disabilities.

If you are a U.S. applicant and desire a reasonable accommodation to complete a job application please use one of the below options to contact our accessibility support team:

Phone: (800) 842-2755

Email: [email protected]

Privacy Notices

For Applicants of TIAA, Nuveen and Affiliates residing in US (other than California), click here.

For Applicants of TIAA, Nuveen and Affiliates residing in California, please click here.

For Applicants of TIAA Global Capabilities, click here.

For Applicants of Nuveen residing in Europe and APAC, please click here.