Security Engineer III

At Exeter Finance, we are committed to helping customers find the right financing for their next vehicle purchase. By building strong relationships with our customers and network of dealer partners we are able to give options that make sense, getting customers behind the wheel of their car.

Every team member is integral to our success. Whether you're at a servicing center helping customers with their loans, in the field building relationships with dealers, or supporting the company from its corporate offices, you'll enjoy a nurturing, invigorating and positive work environment.

Our vision is to be a premier finance company and lender of choice known for its People, Performance and Service.

Job Description

This position is hybrid and will be required to be in office two times per month for collaboration working sessions.

Job Summary:

The Security Engineer (SE) III is responsible for executing daily operational tasks and projects that will reduce the firm's overall security risk footprint. Implements, maintains, and operates security controls in support of Exeter's cyber-security program. SE will have solid grasp of security fundamentals and is able to collaborate effectively with Director-Security Operations and other security team members to evaluate and assess needs for the enterprise information security program.

Job Duties:

• This is a RED TEAM role, that will have strong focus on internal and external pentesting, PII/Data protection, and Security Architecture
• Execute against day-to-day operational security tasks as defined by manager; and partner with MSSP (Managed Security Services Provider) to escalate issues for remediation, security audits/assessments, application security, to ensure the confidentiality, integrity, and availability of information owned, controlled or processed by the organization or third parties.
• Designs, implements, maintains, and operates Exeter's security controls.
• Supports the technical aspects of regulatory/compliance activities: FFIEC, NYDFS, PCI, GLBA.
• Collaborate with cross functional IT teams to Ensure functional capacity strategy aligns with business objectives, and leverages experience and skill set to influence a culture of security compliance across the IT organization.
• Other duties as assigned.

Education and Work Experience:

• Bachelor's Degree or equivalent experience in Computer Science or other job-related field of study.
• Eight (8) plus years of job related experience.
• Well versed with managing security operations and team, exposure to variety of security tools, threat/vulnerability management and remediation, incident management, knowledgeable with internal and/or external Pentesting, including application pentesting, and familiar with encryption suites.
• Experience Conducting cyber risk assessments on internal systems and vendors
• Extensive knowledge and experience in Information Security concepts (both technical and organizational requirements)
• Moderate exposure to SIEM - prefer Sentinel or Splunk, and/or Varonis/Stealthbits
• Communicates and disseminates information, using established communication vehicles for timely response
• Understanding of various regulatory and/or business enabling requirements for financial services industry such as FFIEC, GLBA, NYDFS, PCI, and SOX.
• Familiarity with IT Security Risk Management frameworks (NIST CSF, ISO 27000, COBIT)
• Effective communication and influence skills at all levels including staff, executive leadership, end-users, and vendors, both technical and non-technical.
• Skill in organizing resources and establishing priorities for the continually growth and process improvement model. Ability to drive efficient work strategies and establish a strong functional role-based organization

Compensation Information

Salary Range: $107,200 - $147,400

Individual compensation packages are based on various factors unique to each candidate including skill set, experience, qualifications and other job-related reasons.

#LI-Hybrid

Exeter Finance LLC is an Equal Opportunity Employer.