Lead Cybersecurity Engineer - Vulnerability jobs in United States
cer-icon
Apply on Employer Site
company-logo

M&T Bank · 9 hours ago

Lead Cybersecurity Engineer - Vulnerability

M&T Bank is a Top 20 US bank holding company focused on providing innovative technology solutions in banking. They are seeking a Lead Cybersecurity Engineer to design, implement, and enhance cybersecurity vulnerability platforms and risk posture across their infrastructure, applications, and systems.

Financial Services
check
H1B Sponsor Likelynote
Hiring Manager
Jenna Bissonette
linkedin

Responsibilities

Evaluate, design, implement, and manage vulnerability scanning tools and automated processes to streamline detection and response workflows
Lead integrations of vulnerability scanning tools into the software development & lifecycle process, through collaboration with DevSecOps, IT, infrastructure and security teams, to ensure vulnerability management processes align with security best practices and organizational goals
Design security systems or solutions with significant complexity and moderate risk, ensuring alignment with cybersecurity objectives and organizational needs
Configure and develop controls for security systems with significant complexity, to fortify system defenses and optimize performance of technologies
Lead testing efforts for systems and technology, coordinating with cross-functional teams and providing technical expertise in identifying and resolving issues
Manage deployment of security solutions for complex systems or technology, ensuring smooth integration with existing infrastructure and minimal disruption
Define and implement tuning methodologies for systems and technologies, using advanced analytical techniques to maximize efficiencies
Develop and implement automation and orchestration for complex systems to streamline security operations and response activities
Lead collaboration efforts with Cybersecurity and Technology teams to effectively implement and maintain security solutions for the organization
Lead improvement initiatives within Cybersecurity team, implementing best practices and optimizing processes to enhance security capabilities
Actively partner with vendor to optimize security products and/or drive resolution of complex support issues
Assist leadership with vendor relationships by maintaining when licenses need to be renewed, informing when hardware needs to be refreshed or new technologies should be considered
Understand and adhere to the Company’s risk and regulatory standards, policies, and controls in accordance with the Company’s Risk Appetite. Design, implement, maintain, and enhance internal controls to mitigate risk on an ongoing basis. Identify risk-related issues needing escalation to management
Maintain M&T internal control standards, including timely implementation of internal and external audit points together with any issues raised by external regulators as applicable
Complete other related duties as assigned

Qualification

Vulnerability scanning toolsDevSecOps practicesScriptingAutomationSecurity frameworksContainer securityCloud security toolsCybersecurity certificationsCritical thinkingProblem solvingCommunication skillsInterpersonal skills

Required

Bachelor's degree and a minimum of 5 years' relevant work experience, or in lieu of a degree, a combined minimum of 9 years' higher education and/or work experience
In-depth knowledge and hands-on experience with vulnerability tools and technologies (e.g., Blackduck, Veracode, Qualsys, Rapid7, Checkmarx, Burp Suite, etc.)
Strong knowledge of DevSecOps practices and secure integration into CI/CD pipelines

Preferred

Proficiency in scripting and automation (e.g., Python, PowerShell, bash, Java, or similar)
Experience with container security and cloud security tools (e.g., Docker, Kubernetes, AWS, Azure)
Relevant certifications (e.g., CISSP, SSCP, CompTIA Security+, AWS Certified Security Specialty, Azure Security Engineer, or similar cybersecurity certifications) are a plus
Experience with security frameworks (e.g., NIST, CIS, OWASP)
Advanced understanding of the security system development and infrastructure lifecycle and architecture, and systems design
Proven experience with the development and customization of tools utilized in assigned Cybersecurity function
Demonstrated ability to translate architecture into technical requirements
Proficient level of critical thinking and problem solving ability
Excellent communication and interpersonal skills
Experience partnering with leaders to design solutions to business needs
Proficient persuasive communication skills to gain buy-in of others
Strong ability to analyze and draw reliable conclusions based on large volumes of quantitative data from diverse sources
Ability effectively serves in indirect leadership role

Benefits

Health, welfare, and retirement benefits
401(k) match at 5%
Work-life balance and flexible work arrangements
Banking Officers start with 25 days PTO plus 12 paid holidays
40 hours paid volunteer hours per year
Much more. For details, see: M&T Benefits Overview

Company

M&T Bank

company-logo
Great companies have an enduring sense of purpose.

H1B Sponsorship

M&T Bank has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)
Distribution of Different Job Fields Receiving Sponsorship
Represents job field similar to this job
Trends of Total Sponsorships
2025 (116)
2024 (113)
2023 (84)
2022 (103)
2021 (42)

Funding

Current Stage
Late Stage

Leadership Team

leader-logo
René Jones
Chairman & Chief Executive Officer
linkedin
leader-logo
Dan Saper
•Co-Founder/Co-Chairman of Welcome to M&T Bank Affinity Group, Western New York Chapter
linkedin
Company data provided by crunchbase