Security Engineer III

At Exeter Finance, we are committed to helping customers find the right financing for their next vehicle purchase. By building strong relationships with our customers and network of dealer partners we are able to give options that make sense, getting customers behind the wheel of their car.

Every team member is integral to our success. Whether you're at a servicing center helping customers with their loans, in the field building relationships with dealers, or supporting the company from its corporate offices, you'll enjoy a nurturing, invigorating and positive work environment.

Our vision is to be a premier finance company and lender of choice known for its People, Performance and Service.

Job Description

Job Summary:

The Senior Security Engineer designs, implements, maintains, and operates security controls in support of Exeter's cybersecurity program.

Job Duties:

• Operate and maintain Data loss prevention technologies
• This must include McAfee and/or O365 DLP
• Must have strong experience in handling DLP events and incidents
• Drive remediation of security risks including tracking of issues and action plans, and partner with patch coordination teams, technology/application owners, and business units to prioritize and enhance remediation efforts
• Familiarity with Microsoft Azure cloud including Microsoft Sentinel and Office365
• Perform threat hunting within Azure to identify potential threats to digital assets
• Automate work to identify and classify data based on sensitivity in cloud and on premises
• Validate vulnerability findings for false positives and negatives, and document findings for future use
• Maintain security endpoint agent compliance
• Group and prioritize remediation findings in a manner that increases efficiency
• Conduct technical assessments, such as Penetration Tests, Vulnerability Assessments, Social Engineering, Physical Bypass, and Red Teaming independently and with the team
• Operate and maintain Palo Alto Networks Firewall including rule review, URL Protect, Threat Protect, and WildFire.
• Supports the technical aspects of regulatory/compliance activities: FFIEC, NYDFS, PCI, GLBA.
• Conducts cyber risk assessments on internal systems and vendors.
• Monitor server logs, firewall logs, intrusion detection logs, and network traffic (wired & wireless) for unusual or suspicious activity, interpret and make recommendations for resolution.
• Recommend, coordinate and apply fixes, security patches, disaster recovery procedures, and any other measures required in the event of a security breach.
• Performs special projects and participates as a technical advisor for a variety of ad-hoc information security and logical user access projects that will be dictated by current business and technological developments

Education and Work Experience:

• College Degree or equivalent experience in information security technology or required field, or equivalent work experience.
• Ten (10+) or more years of security experience required.
• Proven progressive security experience.
• CISSP or other security related certifications preferred.
• Understanding of various regulatory and/or business enabling requirements for financial services industry such as FFIEC, GLBA, NYDFS, PCI, and SOX.
• Familiarity with IT Security Risk Management frameworks (NIST CSF, ISO 27000, COBIT)
• Effective communication and influence skills at all levels including staff, executive leadership, end-users, and vendors, both technical and non-technical.

Exeter Finance LLC is an Equal Opportunity Employer.