A bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a closely related field.
Three years of experience as a Security Engineer, Security Analyst, Incident Responder, or in a closely related occupation.
Three years of the required experience must be in the credit card industry or consumer finance industry.
Advanced security event monitoring, investigation, and response capabilities.
Experience engineering, tuning, and operating on a Security Information and Event Management platform.
Knowledge of security concepts, defense-in-depth strategies, security tools, and protocols.
Ability to communicate security issues and risks to technical and non-technical audiences.
Ability to troubleshoot and solve complex security, hardware, and network systems problems.
Experience researching cybersecurity and technology trends, news, and hacking techniques.
Knowledge and prior experience with Kusto Query Language.
Responsibilities
Implement, operate, monitor, and improve information security processes and systems that protect bank data, customers, and computer systems from business disruption, data and identity compromise, cyber fraud, and regulatory criticism.
Perform security incident event management and network intrusion detection using security concepts, defense-in-depth strategies, security tools, and protocols.
Support security-focused tools and services.
Conduct security event monitoring, investigation, detection, and incident response, including log analysis and investigation documentation.
Perform incident response on escalated tickets.
Participate in major incident response engagements.
Use tools to monitor system and application log alerts for unauthorized activity and analyze infected systems.
Engineer, tune, and operate log sources, alerts, rules, and monitors in the Security Information and Event Management platform to detect threats and enable rapid incident response.
Assist with gathering information during penetration testing, incident handling and digital forensics, continuous monitoring, and intrusion detection and prevention.
Work with auditors to provide evidence of compliance to regulatory bodies.
Comply with the bank's internal control policies and procedures and applicable laws and regulations.
Communicate operational problems, noncompliance, policy violations, and illegal acts.
Use Kusto Query Language to run advanced queries for threat hunting, anomaly detection, and security event investigations in the XDR platform.
Travel to South Jordan, Utah one day per week.
Work full-time, 40 hours per week, Monday through Friday from 8:00 a.m. to 5:00 p.m.
Become an everyday champion — and build a career where your impact fuels financial progress.
What We Do
CardWorks Financial Group is a diversified financial services platform building ethical solutions across credit, lending, and the full customer lifecycle. Through our family of companies, CardWorks Financial Group tackles the complex challenges that larger financial institutions leave behind. We’re embedded throughout the credit card ecosystem as a lender, servicer, and merchant acquirer.
Who We Are
Merrick Bank: The bank that builds
CardWorks Servicing: One partner, total performance
Carson Smithfield: Resolution with respect
With nearly 40 years of operating history, our track record is solid: disciplined in downturns and built to accelerate in recovery. The CardWorks Financial Group companies take precise approach in complex markets, as a top three non-prime focused general purpose card issuer and a top fifteen U.S. merchant acquirer.
Our team tackles the industry’s most complex credit and payment challenges. And we believe that excellent work starts with a team that feels supported, respected, and empowered to grow.
CardWorks Servicing, LLC provides end-to end operational servicing functions for credit cards, secured cards, and installment loans. We service consumer and small business loans across the credit spectrum and offers backup servicing and due diligence services to capital providers and trustees.
Founded in 1997, Merrick Bank is an FDIC®-insured financial institution headquartered in South Jordan, Utah, with over $10 billion in assets. A wholly owned subsidiary of CardWorks Financial Group, Merrick Bank serves roughly five million cardmembers and more than 100,000 merchant customers, offering credit cards, recreational loans, deposit accounts, merchant services and bank sponsorships to consumers and businesses.
Carson Smithfield, LLC provides a variety of post-charge-off debt recovery services, including digital self-service, IVR, live agent, and external agency management.
Company: CardWorks Servicing, LLC
Worksite Address: 101 Crossways Park Drive West, Woodbury, New York 11797. Work from home benefit provided. Worksites are unanticipated.
Job Title: Information Security Engineer II
Salary: $97,800.00/year
Job Duties:
Implement, operate, monitor, and improve information security processes and systems that protect the Bank’s data, customers, and computer systems from business disruption, data/identity compromise, cyber fraud, and regulatory criticism.
Perform security incident event management and network intrusion detection using security concepts, defense-in-depth strategies, security tools, and protocols.
Engage in the support of security-focused tools and services.
Conduct security event monitoring, investigation, detection, and incident response, including log analysis and documentation of investigations.
Perform incident response on escalated tickets.
Participate in major incident response engagements.
Use a variety of tools to monitor system and application log alerts for indication of unauthorized activity and perform analysis on infected systems.
Engineer, tune, and operate log sources, alerts, rules, and monitors in the Security Information and Event Management (SIEM) platform, that collects, correlates, and analyzes security logs and events in real-time to detect threats and enable rapid incident response.
Work with IT Security Engineers and assist with gathering information during penetration testing, incident handling/digital forensics, continuous monitoring, and intrusion detection/prevention.
Work with auditors to provide the required evidence of compliance with the regulatory bodies.
Comply with all the Bank’s internal control policies and procedures.
Understand and comply with all laws and regulations to which the Bank is subject.
Communicate problems in operations, noncompliance with the code of conduct, noncompliance with laws and regulations, policy violations, or illegal acts.
Communicate security issues and risks to individuals with technical and non-technical backgrounds.
Troubleshoot and problem-solve complex security, hardware, and network systems.
Research cybersecurity and technology trends, news, and hacking techniques.
Use Kusto Query Language (KQL) to run advanced queries for threat hunting, anomaly detection, and security event investigations in the XDR platform.
Work from home benefit provided. Worksites are unanticipated.
Required to travel to 10705 South Jordan Gateway, South Jordan, Utah 84095 one day per week.
Education: Bachelor’s degree in Cybersecurity, Computer Science, Information Technology or a closely related field.
Experience: Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation.
Special Requirements: Three (3) years of experience as a Security Engineer, Security Analyst, Incident Responder or a closely related occupation must be in the Credit Card Industry or Consumer Finance Industry.
Demonstrable knowledge and prior experience in:
Advanced security event monitoring, investigation, and response capabilities.
Engineering, tuning, and operating on the SIEM platform.
Security concepts, defense-in-depth strategies, security tools, and protocols.
Communicating security issues and risks to individuals with technical and non-technical backgrounds.
Troubleshooting and problem-solving complex security, hardware, and network systems.
Researching cybersecurity and technology trends, news, and hacking techniques.
Kusto Query Language (KQL).
Travel Requirements: Required to travel to 10705 South Jordan Gateway, South Jordan, Utah 84095 one day per week.
To Apply: Apply at https://www.cardworksservicing.com/careers/. Only qualified applicants should apply. Must have U.S. employment authorization. Do not apply if you are in F-1 or H-1 status or otherwise require employer sponsorship for U.S. employment authorization.
#LI-DNI
Our Employee Value Proposition
Competitive Pay, including a Bonus Target or Variable Pay Incentive Program
Benefits Package -Medical, Dental, and Vision (plus much more)
401(k) Plan with Company Match
Short- & Long-Term Disability
Wellness Programs
Group Life and AD&D Insurance
Paid Vacation, Sick Days and bank Holidays
Employee Engagement Activities including Employee Appreciation Day, DEI Employee Resource Groups, Corporate Social Responsibility, Service Recognition
We offer a total rewards package comprised of a competitive base rate of pay, variable pay incentive programs based on the role, and a comprehensive benefit suite. Offered rates of pay are determined based on job-related knowledge, relevant experience, skills, certifications, and geographic location.
We are proud to be an equal opportunity employer. All qualified applicants will receive consideration without regard to age, race, color, sex, or gender identity/expression (including pregnancy, childbirth, transgender status, or sexual orientation), religion or creed, ancestry, citizenship, national origin, disability, military or veteran status, marital status, genetic information, or any other characteristic protected by applicable law.
We do not tolerate discrimination, harassment, or retaliation. Employment decisions are based solely on qualifications, merit, and business needs. Everyone is welcome here, and we hire based on your ability to do the job, not any protected characteristics.
If you need help or reasonable accommodation during the application or hiring process, please let your TA Partner know.