Principal Cybersecurity DLP Engineer

Responsible for designing and implementing highly complex scale security systems, solutions, and framework to develop or enhance new or existing security solutions, solving highly complex problems or enhancements.  Acts as knowledge resource and mentor for less experienced engineers across multiple functions. Completes day-to-day support activities and special projects.

• Partner with senior engineers and leadership to define overarching security framework and strategies to drive complex outcomes and risk, ensuring alignment with cybersecurity strategic imperatives, peer organizations and evolving industry trends and regulations.
• Lead configuration and development of security systems for complex initiatives, providing technical direction and mentorship to security teams and engineers.
• Define testing methodologies and frameworks, ensuring thorough evaluation of security configurations and tools across the organization.
• Lead deployment efforts for complex systems and technologies, coordinating with cross-functional teams and providing technical oversight to ensure successful implementation.
• Establish tuning best practices and frameworks, leveraging deep expertise to drive continuous improvement in security configurations and tools across the organization.
• Lead automation initiatives, designing sophisticated workflows and orchestrating complex security processes to enhance productivity and responsiveness.
• Establish key relationships between Cybersecurity, Technology, and appropriate stakeholders across the organization to seamlessly integrate security solutions into organizational processes and workflows.
• Drive continuous improvement efforts across initiatives and Cybersecurity teams, identifying trends and implementing strategic improvements to elevate Cybersecurity's effectiveness.
• Maintain vendor relationships for specific security products or solutions, including communication around maintenance, issue resolution, and troubleshooting.
• Strategize with leadership to manage vendor relationships by informing budget for future tools and needs.

• Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management.
• Promote an environment that supports belonging and reflects the M&T Bank brand.
• Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable.
• Complete other related duties as assigned.

• This role is used in one or more of the following cybersecurity function:
  • Data Loss Prevention Engineering – designs and implements strategies and technologies to prevent unauthorized access, transmission, or leakage of data within and outside of the Bank's network and systems.
  • Detection Engineering – develops and deploys systems and processes to identify and respond to cybersecurity threats and incidents in real-time, aiming to minimize the impact of security events.
  • Identity and Access Engineering – develops and manages the architecture, automation, and control mechanisms for provisioning of least privilege access for employees and contractors to internal and 3rd party systems, applications, and data sources.
  • Security & Network Infrastructure – designs and implements secure network architecture, protocols, and technologies to protect data in transit, prevent unauthorized access, and detect and mitigate network-based attacks.  Architects, maintains, and optimizes the tools and capabilities leveraged by cyber security to achieve organizational objectives.
  • Protection Engineering – designs and implements security strategies, systems, policies, and procedures that proactively protect against cybersecurity threats and malicious activities targeting the Bank's systems and assets.
  • Cloud Engineering – designs and implements the security of the organization’s cloud computing environment to protect against cybersecurity threats and malicious activities.
• Partners primarily with leaders within Technology, senior leaders within Cybersecurity, and occasionally senior leaders within Technology
• Exercises judgement in selecting methods, techniques, and criteria in executing objectives. Exerts significant latitude in determining objective of assignment. Takes calculated risks with consultation from expert. Work is accomplished with minimal direction.
• Subject matter expert of multiple Cybersecurity tools, specific to function

No supervisory responsibilities

• Bachelor's degree and a minimum of 7 years’ relevant work experience, or in lieu of a degree, a combined minimum of 11 years’ higher education and/or work experience

• Advanced understanding of the security system development and infrastructure lifecycle and architecture, vendor best practices, and systems design
• Expert in the development and customization of tools utilized in assigned Cybersecurity function
• Excellent ability to translate business and functional needs into technical requirements and implementations
• Advanced level of critical thinking and problem solving
• Excellent communication and interpersonal skills, effectively articulating messages to technical and business teams
• Experience partnering with senior leaders to design solutions to business needs.
• Experience effectively influencing peers and leaders.
• Advanced ability to analyze large datasets through statistical techniques and draw valuable conclusions.
• Ability to effectively serve in indirect leadership role
• Demonstrated proficiency in team dynamics and decision-making.