Principal Cyber Security Engineer

Ally Financial only succeeds when its people do - and thats more than some clich people put on job postings. We live this stuff! We see our people as, well, people - with interests, families, friends, dreams, and causes that are all important to them. Our focus is on the health and safety of our teammates as well as work-life balance and diversity and inclusion. From generous benefits to a variety of employee resource groups, we strive to build paths that encourage employees to stretch themselves professionally. We want to help you grow, develop, and learn new things. Youre constantly evolving, so shouldnt your opportunities be, too?

• The Opportunity

At Ally, you get a startup feel, but experience the benefits of a company thats worked out the kinks and is fulfilling its purpose. Were always evolving and see that as a good thing. From owning our work to seeing its impact in the real world, our team is relentless in finding new ways technology can help make experiences better and help people. We are problem solvers, we value diverse thinking, we support one another, and we challenge ourselves to think bigger in the journey to deliver customer-obsessed tech solutions. To read more about what our tech team does, be sure to visit our tech blog at ally.tech

This Principal Cyber Security Engineer role will be focused on cyber event data analytics and automation. The individual will be responsible for developing and implementing data-driven security solutions to protect Ally's assets, data, brand, and consumers in a cloud-first, consumer-friendly operating model. This role will require a skilled cyber security professional with strong technical expertise in data engineering, analytics, and automation to partner with IT Architecture, IT Engineering, IT Operations, DevOps, and business leaders. The principal will be responsible for ensuring that cyber security data and reporting is available to make data-driven decisions and that Ally's people, technologies, and processes are adequately secured and monitored to meet cyber security regulations. Additionally, this role will be responsible for leveraging security automation and orchestration (SOAR) solutions to streamline security operations and incident response, working closely with security teams to enhance detection and response capabilities.

• The Work Itself
• Develop and implement security automation and orchestration (SOAR) solutions to streamline security operations and incident response.
• Partner with security operations teams, threat intelligence groups, and incident responders to enhance detection and response capabilities.
• Assist in workshops and training sessions to help customers leverage the full value of security automation and orchestration solutions.
• Liaison with other corporate data analytics teams, lines of business, external contractors, service providers, vendors, law enforcement, and others to extract and manage cyber security data.
• Drive process improvements through automation
• Model business processes for analysis and optimization to support cyber risk management outcomes.
• Analyze cyber event logs and alerts to identify high-risk activities and use that data to trigger operational risk litigations.
• Implement tools to visualize data analysis results, create cyber risk metrics and reports, and present findings to Ally leadership.
• Create data movement / piping scripts to securely move data and facilitate the data aggregation and analysis processes.
• Use data analysis results to adjust, tune, and improve Ally's cyber operational processes, technologies, policies, standards, and practices to drive down cyber risks.
• The Skills You Bring
• 4 years of experience as a cyber security and / or information protection practitioner
• 3 years of experience with security automation and orchestration (SOAR) platforms
• 2 years of experience in cyber data engineering and / or cyber data analytics
• Bachelor's degree in a STEM field or Computer Information Sciences, or 10 years of relevant experience
• Proficient in scripting technologies such as Python, PowerShell, and APIs
• Hands-on experience in automation platforms, including writing playbooks and troubleshooting
• Familiarity with ETL platforms, relational databases, columnar databases, SIEM solutions, and data visualization tools like Power BI
• Strong debugging and problem-solving skills, with the ability to integrate multiple tools and APIs
• Excellent communication and interpersonal skills to work with various stakeholders
• Proficient in Gitlab

Preferred Qualifications :

• Experience with public cloud platforms (AWS, Azure, etc.)
• Expertise in cloud-native technologies and implementation patterns to drive innovation and efficiency
• Cyber security certifications (CISSP, CISM, CISA, etc.)
• Experience with Agile methodologies and collaborative work environments
• Familiar with corporate change management

LI-Hybrid

• How We'll Have Your Back

Ally's compensation program offers market-competitive base pay and pay-for-performance incentives (bonuses) based on achieving personal and company goals. But Allys total compensation - or total rewards - extends beyond your paycheck and is designed to support and enrich your personal and professional life, including :

• Time Away : competitive holiday and flexible paid-time-off, including time off for volunteering and voting.
• Planning for the Future : plan for the near and long term with an industry-leading 401K retirement savings plan with matching and company contributions, student loan and 529 educational assistance programs, tuition reimbursement, and other financial well-being programs.
• Supporting your Health & Well-being : flexible health and insurance options including dental and vision, pre-tax Health Savings Account with employer contributions and a total well-being program that helps you and your family stay on track physically, socially, emotionally, and financially.
• Building a Family : adoption, surrogacy, and fertility support as well as parental and caregiver leave, back-up child and adult / elder day care program and childcare discounts.
• Work-Life Integration : other benefits including LifeMatters Employee Assistance Program, subsidized and discounted Weight Watchers program and other employee discount programs.

Who We Are :

Ally Financial is a customer-centric, leading digital financial services company with passionate customer service and innovative financial solutions. We are relentlessly focused on "Doing it Right" and being a trusted financial-services provider to our consumer, commercial, and corporate customers. For more information, visit www.ally.com.

Ally is an equal opportunity employer committed to diversity and inclusion in the workplace. All qualified applicants will receive consideration for employment without regard to age, race, color, sex, religion, national origin, disability, sexual orientation, gender identity or expression, pregnancy status, marital status, military or veteran status, genetic disposition or any other reason protected by law.

Where permitted by applicable law, must have received or be willing to receive the COVID-19 vaccine by date of hire to be considered, if not currently employed by Ally.

We are committed to working with and providing reasonable accommodation to applicants with physical or mental disabilities. For accommodation requests, email us at work@ally.com. Ally will not discriminate against any qualified individual who is capable of performing the essential functions of the job with or without reasonable accommodation.

• Base Pay Range : _
• Emerging :
• 110000
• Experienced :
• 145000
• Expert :
• 180000

Incentive Compensation : This position is eligible to participate in our annual incentive plan