Remote Principal Cyber Security Platform Engineer

Note: The job is a remote job and is open to candidates in USA. Jack Henry is a technology company focused on transforming financial services for community banks and credit unions. They are seeking a Principal Cyber Security Engineer to safeguard their infrastructure and customer data by leveraging cybersecurity expertise to enhance their security posture across various environments.ResponsibilitiesBuild and operate security observability and monitoring capabilities, including SIEM, SOAR, and log aggregation, to enable real-time threat detection and responseDevelop and tune detection rules, alerting, and dashboards to improve visibility, response times, and security KPIsImplement and enforce security controls across multi-cloud environments (AWS, Azure, Google Cloud Platform), leveraging CSPM, CWPP, and CNAPP solutions to protect cloud infrastructure and workloadsDevelop infrastructure-as-code and policy-as-code guardrails to ensure secure, consistent cloud deploymentsEmbed security into CI/CD pipelines, integrating tools such as SAST, DAST, SCA, and container scanning to advance DevSecOps practices and reduce vulnerabilities earlyPartner with engineering teams on secure coding, threat modeling, and vulnerability remediation effortsSupport incident response and threat management, including escalation, investigation, and continuous improvement of playbooks and response processesImplement and enhance identity and access management (IAM), including zero-trust principles, least-privilege access, MFA, and privileged access controlsIdentify and mitigate security risks, ensuring alignment with regulatory and compliance requirements (SOC 2, PCI-DSS, FFIEC, NIST), while mentoring engineers and driving adoption of scalable security practicesMay perform other job duties as assignedSkillsMinimum of 15 years of progressive experience in cyber security or site reliability engineeringMinimum of 5 years of hands-on experience with cloud platforms (AWS, Azure, or Google Cloud Platform) in a security-focused capacityMinimum of 5 years of experience in cyber detection and incident responseMinimum of 3 years of experience with security observability and monitoring tools (SIEM, log management, APM)Demonstrated experience in DevSecOps practicesBachelor's degree in Computer Science, Cyber Security, Information Technology, Computer Engineering, or a closely related technical fieldStrong knowledge of networking fundamentals (TCP/IP, DNS, TLS/SSL, VPN, firewalls, load balancers)Experience with container technologies (Docker, Kubernetes) and their associated security challengesWorking knowledge of regulatory frameworks relevant to financial services (PCI-DSS, SOC 2, FFIEC, NIST 800-53)Familiarity with offensive security concepts, penetration testing methodologies, and red/blue/purple team exercisesExperience in the financial services or fintech industry with knowledge of banking regulations and compliance requirementsExperience with security automation and orchestration (SOAR) platformsHands-on experience with zero-trust network architectures and micro-segmentation technologiesBackground in threat hunting, digital forensics, or malware analysisExperience leading or mentoring security engineering teamsContributions to open-source security tools or active participation in industry security communities (DEF CON, BSides, OWASP chapters)BenefitsComprehensive benefits designed to support your physical, mental, and financial health so you can thrive both personally and professionallyCompany OverviewDice is a job-searching platform for technology professionals. It is a sub-organization of DHI Group. It was founded in 1990, and is headquartered in Santa Clara, California, USA, with a workforce of 201-500 employees. Its website is http://www.dice.com. Apply To this Job Note: The job is a remote job and is open to candidates in USA. Jack Henry is a technology company focused on transforming financial services for community banks and credit unions. They are seeking a Principal Cyber Security Engineer to safeguard their infrastructure and customer data by leveraging cybersecurity expertise to enhance their security posture across various environments.ResponsibilitiesBuild and operate security observability and monitoring capabilities, including SIEM, SOAR, and log aggregation, to enable real-time threat detection and responseDevelop and tune detection rules, alerting, and dashboards to improve visibility, response times, and security KPIsImplement and enforce security controls across multi-cloud environments (AWS, Azure, Google Cloud Platform), leveraging CSPM, CWPP, and CNAPP solutions to protect cloud infrastructure and workloadsDevelop infrastructure-as-code and policy-as-code guardrails to ensure secure, consistent cloud deploymentsEmbed security into CI/CD pipelines, integrating tools such as SAST, DAST, SCA, and container scanning to advance DevSecOps practices and reduce vulnerabilities earlyPartner with engineering teams on secure cod