Vestwell Inc is hiring: Senior Analyst, Cybersecurity in New York

Overview

Vestwell is a New York City-based financial technology company powering the new savings economy. The platform serves employers, financial advisers, and savers across retirement, education, healthcare savings, and related products. Vestwell enables over 350,000 businesses and nearly 1.5 million active savers with more than $30 billion in assets saved across all 50 states.

Vestwell offers products including workplace-delivered retirement plans, employer-offered student loan repayment benefits, and various savings accounts for education, emergencies, and individuals with disabilities.

For more information, visit vestwell.com.

Who Are We Looking For?

The Vestwell CyberSecurity team is seeking an experienced, meticulous security analyst responsible for monitoring our security systems, securing infrastructure, filtering for suspicious activity, and mitigating security risks before breaches occur. You will collaborate across departments to identify and correct security flaws.

You should have a solid working knowledge of cybersecurity, including intrusion prevention and incident response, and be detail-oriented with strong analytical, communication, interpersonal, and leadership skills.

What Will You Be Doing?

Day-to-day responsibilities within the Security organization include:

• Manage Anti-Virus and Anti-Malware solutions (e.g., CrowdStrike).
• Monitoring and alerting management.
• Ensure infrastructure has the most recent patches, updates, and libraries.
• Management of 1Password and vaults/user access for passwords and keys.
• Management of KnowBe4, phishing tests, training, and response.
• Develop ongoing security posture improvements.
• Evaluate existing and new tooling to protect customer PII and sensitive data.
• Manage Nightfall DLP solution and implement detection rules aligned with platform growth.
• Respond to DLP leakage alerts and take action as needed.
• Collaborate with Engineering to provide guidance on industry best-practice security.
• Help evolve A&A platforms to adhere to industry standards and Vestwell growth.
• Support responses to DDQs or risk questionnaires from potential customers.

Day to Day, You May Also Be Expected To

• Work with Legal and Compliance to evaluate and improve policies.
• Collaborate with CorpIT to evolve onboarding/offboarding with a security focus.

Requirements

The Necessities

• Professional experience in computer science, programming, or a related field.
• Experience in computer systems with specialization in computer security.
• Ability to manage competing deadlines and communicate effectively.
• Strong verbal and written communication, interpersonal, and teaching skills.
• Ability to anticipate, analyze, and solve problems; stay current on security best practices.
• Proficiency with a broad array of security software and tools, or the ability to gain proficiency quickly.
• Thorough understanding of security systems including firewalls, encryption, and authentication.
• Experience with penetration testing and related techniques.
• Understanding of patch management.

The Extras

• Advanced training certifications may be advantageous (e.g., CISSP).
• Experience with SOC audits and financial regulatory audits/compliance (ERISA, SEC, etc.).

The expected salary range for this position is $130K-160K for New York.

Our Benefits

We are a high-growth company that values health and wellness. We offer competitive health coverage, a generous vacation policy, and a hybrid office policy with a modern workspace in Midtown Manhattan. Vestwell also provides a strong 401(k) plan.

Our Process

Our interview process emphasizes transparency and collaboration. It typically involves 1-2 conversations to get to know the team, a skills assessment or experience screen, and a virtual or in-person interview panel if the screens go well. A references check is conducted before an offer is made. You will only receive correspondence from recruiting@vestwell.com.