How would you like to join one of the most highly regarded financial institutions in New Jersey with deep roots in the community? Provident is a successful and highly regarded multi-billion-dollar bank that continues to grow with branches in New Jersey, Eastern Pennsylvania and New York. Our longevity is a testament to our commitment to placing our employees, customers, and the communities we serve at the center of all we do. At Provident Bank, we are committed to enhancing our customer and employees’ experience.
POSITION OVERVIEW:
The Information Security Engineer is a hands-on member of Provident Bank’s Information Security team responsible for engineering, validating, and governing preventive security controls across applications, infrastructure, networks, data stores, cloud services, and approved third-party platforms. The role partners with Infrastructure Engineering, Enterprise Architecture, Application Development, Digital Security Operations (DSO), Identity Governance and Assurance (IGA), Governance, Risk and Compliance (GRC), Internal Audit, business stakeholders, and vendors to reduce the likelihood of successful attacks against the Bank’s digital properties and banking operations. The engineer establishes security standards and guardrails, performs architecture and risk reviews, operates assigned security technologies, validates control effectiveness, and produces evidence demonstrating alignment with Bank policy, risk appetite, and regulatory obligations.
KEY RESPONSIBILITIES:
- Engineer, administer, and continuously improve assigned enterprise security technologies across edge security, email security, identity controls, data protection, cloud security, application security, attack-surface management, and security posture management.
- Develop, document, test, and maintain security standards, secure configuration baselines, hardening guides, architecture guardrails, and control requirements for third-party software, applications, servers, endpoints, networks, data stores, cloud services, SaaS platforms, APIs, and integration layers.
- Perform security architecture reviews, threat modeling, technical risk assessments, and pre-production control validation for new systems, major changes, vendor integrations, data flows, cloud services, and emerging technologies, including artificial intelligence services.
- Support application security for mobile applications, web applications, APIs, and integrations by evaluating authentication, authorization, secrets handling, secure development practices, code and dependency risks, and SAST/DAST or equivalent testing results.
- Validate cloud and hosted-environment controls, including identity, network segmentation, encryption, key and secrets management, logging, backup and recovery, workload protection, configuration compliance, and cloud or data security posture management. Implement and validate identity-first controls, including Microsoft Entra ID, single sign-on, multifactor authentication, conditional access, privileged access management, least privilege, service principals, workload identities, and role-based access control, in coordination with IGA and technology owners.
- Operate the ESO security tool governance lifecycle, including onboarding, configuration reviews, health checks, entitlement reviews, vendor service reviews, upgrade planning, resilience and disaster-recovery playbooks, control testing, exception tracking, and retirement activities.
- Coordinate internal and external penetration tests, red or purple team exercises, and specialized security assessments; manage scope and Rules of Engagement, vendor onboarding, testing support, findings readouts, remediation tracking, evidence collection, retesting, and formal closure.
- Partner with technology and business owners to remediate vulnerabilities, insecure configurations, excessive privileges, unsupported components, and control gaps; document ownership, target dates, compensating controls, risk exceptions, and validation results. Integrate and validate relevant telemetry, alerts, and audit logs for security tools and in-scope platforms. Partner with DSO on detection requirements, alert triage, threat hunting, escalated investigations, incident response, and forensic preservation while maintaining clear ESO and DSO accountability.
- Support data protection through classification, Microsoft Purview or approved DLP controls, encryption, key management, retention, secure deletion, and validation of controls protecting customer and Bank information. Maintain accurate architecture diagrams, asset and security-tool inventories, operating procedures, standards, playbooks, evidence, KRIs/KPIs, remediation trackers, and management reporting for audits, regulatory examinations, governance committees, and continuous improvement.
- Represent ESO in assigned project, Architecture Review Board, change-management, vendor, and technology governance activities; provide practical security direction and clearly communicate risks, dependencies, and required controls. Participate in after-hours support or incident-response activities when ESO engineering expertise is required and coordinate with DSO, managed service providers, and critical vendors.
SKILLS AND TRAINING REQUIRED:
- Familiarity with Microsoft Azure, Microsoft 365, Entra ID, Microsoft Purview, containers or Kubernetes, infrastructure-as-code, and secure use of artificial intelligence services.
- Experience with security tool health checks, control testing, business continuity and disaster recovery, vendor management, audit evidence, KRIs/KPIs, and risk-exception processes.
- Broad technical knowledge across networking, operating systems, identity and access management, cloud and SaaS security, application and API security, data protection, vulnerability management, security architecture, and security monitoring concepts.
- Hands-on experience implementing, administering, integrating, testing, or assessing enterprise security technologies and secure configurations across hybrid environments.
- Experience performing technical security assessments, documenting control gaps, coordinating remediation, validating evidence, and communicating residual risk to technical and nontechnical stakeholders.
- Experience with automation or scripting using PowerShell, Python, Bash, APIs, infrastructure-as-code, or comparable tools to improve repeatability, evidence collection, and control validation.
- Working knowledge of security frameworks and banking expectations, including NIST Cybersecurity Framework, NIST 800-53, CIS Benchmarks, FFIEC guidance, GLBA Safeguards, NYDFS Part 500, PCI DSS, and applicable privacy requirements.
- Ability to translate technical findings into clear risk statements, remediation plans, standards, procedures, and concise communications for technology teams, management, auditors, and regulators.
- Demonstrated judgment, ownership, attention to detail, project coordination, documentation discipline, and ability to manage multiple priorities in a regulated environment.
WORK EXPERIENCE:
- 5+ years of hands-on information security, security engineering, infrastructure security, application security, or enterprise security operations experience in production environments.
- Experience in banking, financial services, or another highly regulated industry.
- Experience with application and API security, secure SDLC/DevSecOps, SAST/DAST, penetration testing, threat modeling, and red or purple team activities.
EDUCATION:
- Bachelor’s degree in cybersecurity, computer science, information systems, engineering, or a related field; equivalent relevant experience will be considered.
LICENSES AND/OR CERTIFICATES:
- Relevant certifications such as CISSP, CCSP, CISM, GIAC, OSCP, Security+, Microsoft AZ-500, SC-100, SC-200, SC-300, or comparable credentials preferred.
SUPERVISORY RESPONSIBILITIES:
Does not carry out supervisory responsibilities.
OTHER DUTIES:
Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time with or without notice.
WORKING CONDITIONS:
- Prolonged sitting
- Lifting from 5 to 10 lbs (printer paper, storage boxes)
- Occasional bending or overhead lifting (storing files or boxes)
Work is performed in a normal office environment. Noise levels are usually moderate. May also involve travel to customers and property locations.
HAZARDS:
The hazards are mainly those present in a normal office setting and those present in commuting by car. Occasionally, they may be exposed to those conditions present in public forums and meeting places.
This job description may not be all-inclusive. Employees are expected to perform other duties as assigned and directed by management. Job descriptions and duties may be modified when deemed appropriate by management.
Provident Bank recognizes and supports the importance of creating a socially and culturally diverse employee base. We understand, value, and appreciate the unique perspectives that a diverse workforce can contribute to our organization. We put the employee and the customer at the center of strategy because culture is a critical differentiator for why people choose to work here.
We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age 40 and over, color, disability, gender identity, genetic information, military or veteran status, national origin, race, religion, sex, sexual orientation or any other applicable status protected by state or local law.
PAY DETAILS:
$ 77,000 - $110,000 /annually
Please note, the base pay actually offered may vary based upon the candidate's skills and experience, job-related knowledge, education, geographic location, internal equity, and other applicable business and organizational needs.
This role is incentive eligible based upon company, business, and/or individual goal achievement and performance.
Team members accrue paid time-off (PTO), receive Holiday (PTO) and are eligible to participate in the bank’s Health and Wellness benefits including Medical, Dental and Vision Plans, Flexible and Health Savings Accounts, and a 401(k) Retirement Plan. In addition, the company provides Disability Insurance, an Employee Assistance Program, and Basic Life Insurance. Company sponsored Tuition Disbursement and Loan Repayment programs are also available. Voluntary benefits include Supplemental Life Insurance, Accident, Critical Illness, Hospital Indemnity and Legal plans.
