Network Security Engineer

Is this role right for you?

In this role you will:

• Contribute to the design, implementation, and maintenance of Scotiabank's network security infrastructure.
• Participate in the evaluation and vendor selection process for new network security technologies by preparing RFPs, bid proposals, contracts, scope of work reports, and other documentation for IT projects and associated efforts.
• Evaluate infrastructure resiliency, security and performance to provide statistical reports and enhancement recommendations to executives, stakeholders and department heads.
• Collaborate with cross-functional teams to integrate security best practices into the design and implementation of new network security technologies and initiatives.
• Assess emerging threats and vulnerabilities and recommend proactive security measures to safeguard against potential attacks.
• Identify technology and security gaps, develop comprehensive mitigating strategies and contingencies.
• Collaborate with Business and other technology groups to ensure that all initiatives are appropriately assessed and reviewed in terms of risk and security compliance.
• To ensure rapid recovery in the event of a disaster, the Network and Security Architect is required to coordinate the review of policies and procedures to ensure compliance with disaster recovery and contingency plans.
• Research, review and actively stay informed on newly emerging technologies.
• Serve as a subject matter expert on network security technologies, trends, and industry best practices.

Do you have the skills that will enable you to succeed in this role? We'd love to work with you if you have:

• Bachelor's degree in Computer Science, Information Technology, or related field. Advanced degree or relevant certifications (e.g., CISSP, CCNP Security, CEH) preferred.
• 5+ years of experience in network security engineering or related role planning, designing and deploying large-scale enterprise or data-center infrastructure/technologies. With in depth knowledge of network security principles, protocols, architectures and technologies.
• Google/Azure/ AWS Cloud Security Engineering, CCNP Security, CISSP, CCSP and other professional certifications are strong assets.
• In-depth working knowledge of network security principles, protocols, architectures, and technologies are essential. This includes strong working knowledge of industry leading technology providers within the following spaces:
• Next Generation Firewalls (NGFWs) Network Access Control (NAC) Email Security Network Segregation and Micro segmentation Content Delivery Network (CDN) Zero Trust Security Architecture (ZTA) and Software-Defined Perimeter (SDP) Cloud Native Security Cloud Secure Web Gateways (SWGs) Security Service Edge (SSE)
• Extensive hands-on experience with Windows and Linux operating systems.
• Proficient in Google and Azure cloud platforms, including cloud security best practices, implementing controls, monitoring, and resolving cloud-specific security issues.
• Skilled in designing and managing secure, resistant infrastructures using WAF, CDNs, load balancers, and filtering technologies.
• Strong documentation abilities for complex enterprise systems and effective technical communication.
• Solid understanding of information security standards and best practices.
• Experienced in network security assessment, penetration testing, and vulnerability management.
• Skilled in recommending enhancements to operational systems and processes.
• Proficient in documenting sophisticated enterprise systems and procedures, with a strong focus on effectively communicating detailed technical information.
• Demonstrates solid knowledge of general business practices and conditions; able to think strategically and effectively convert business requirements into robust security solutions.
• Strong understanding of regulatory compliance requirements and industry standards related to network security (e.g., ISO 27001, NIST, PCI DSS).
• Proficiency in conducting risk assessments, identifying vulnerabilities, and assessing the potential impact of security threats. Ability to develop risk mitigation strategies and prioritize security measures based on risk levels.
• Able to communicate technological concepts clearly and interact effectively with senior business leaders.
• Proactive and results-oriented with good time management skills, and the ability to work well under pressure and focus on multiple priorities concurrently.
• Commitment to staying updated with the latest cybersecurity trends, technologies, and best practices. Ability to adapt to evolving security threats and technological advancements to continuously improve network security posture.
• Excellent communication skills to convey complex technical concepts to non-technical stakeholders. Ability to engage with business leaders, IT teams, and external partners to articulate security risks, requirements, and solutions.
• Excellent organizational, interpersonal and presentation skills.
• Very hands-on person, who embraces new technologies and concepts.

What's in it for you?

• Diversity, Equity, Inclusion & Allyship - We strive to create an inclusive culture where every employee is empowered to reach their fullest potential, respected for who they are, and are embraced through bias-free practices and inclusive values across Scotiabank. We embrace diversity and provide opportunities for all employee to learn, grow & participate through our various Employee Resource Groups (ERGs) that span across diverse gender identities, ethnicity, race, age, ability & veterans.
• Accessibility and Workplace Accommodations - We value the unique skills and experiences each individual brings to the Bank and are committed to creating and maintaining an inclusive and accessible environment for everyone. Scotiabank continues to locate, remove and prevent barriers so that we can build a diverse and inclusive environment while meeting accessibility requirements.
• Upskilling through online courses, cross-functional development opportunities, and tuition assistance.
• Competitive Rewards program including bonus, flexible vacation, personal, sick days and benefits will start on day one.
• Community Engagement - no matter where you choose to work from; we offer opportunities for community engagement & belonging with our various programs such as hackathons, contests, Humans of Digital and much more!