OneMain Financial Jobs

Design end-to-end cybersecurity architectures across cloud (AWS, Azure, GCP), hybrid, and OT environments. Develop secure reference architectures and implement guidelines tailored to client infrastructure and regulatory

requirements. Guide security integration with IT/OT systems, including ICS/SCADA, industrial networks, and cloud-native applications. Develop and implement strategies for threat detection, incident response (IR), and threat hunting in OT and cloud environments. Coordinate with SOC/MSSP teams and leverage Cybersecurity tools. Recommend and engineer advanced security controls such as SIEM, SOAR, XDR, endpoint protection, and network segmentation. Support SOC and security operations teams with architecture designs, escalation paths, and technology stack optimization. Collaborate with clients to assess their cybersecurity maturity and define tailored security architecture roadmaps. Ensure solutions adhere to standards such as NIST CSF, ISO 27001. Provide input for incident response plans, disaster recovery, and business continuity planning. Assist in third-party risk assessments and secure integration of vendor technologies. Support internal audits, vendor security assessments, and third-party risk reviews. Stay current with emerging threats, technologies, and frameworks to recommend improvements and innovations. Integrate security into the software development lifecycle (SSDLC) using tools like SAST, DAST, WAF, IaC scanning, and container security. Support secure coding practices and code reviews for applications. Collaborate with developers and DevOps teams to embed automated security in CI/CD pipeline. Assist project teams with architecture reviews, security controls, and risk assessments throughout the project lifecycle.

Requirements: Must have Bachelor's Degree (or U.S. Equivalent) in Computer Science, Information Systems, Cyber Security or closely related field. Employer will accept 3 or 4 year degree. 2 years of experience in Cyber Security. Experience in conducting and/or developing risk assessments, IT, OT/ICS and IoT environments, integrating security into the Secure Software Development Life Cycle (SSDLC), designing/tailoring cybersecurity programs, developing and implementing security strategies, managing and delivering incident response and threat intelligence. Must hold a valid CISSP certification. Must have proof of legal authority to work in the United States.