Intern - FedNow Information Security

Company

Federal Reserve Bank of Boston

Federal Reserve Financial Services (FRFS) delivers a suite of payments services to financial institutions via FedLine® Solutions, FedNow®, Fedwire®, National Settlement Service (NSS), FedCash®, FedACH® (Automated Clearing House), and Check Services.

We are currently leading a strategic effort to transform FRFS to a national, enterprise-focused organization.

Through our evolved structure, we will meet the needs of the marketplace for new products and services more quickly, seek to provide a more robust and unified customer experience across our financial service offerings, and create new career growth opportunities for FRFS staff.

The Federal Reserve has developed a new interbank 24x7x365 real-time gross settlement (RTGS) platform with integrated clearing functionality, called the FedNow Service.

This service enables financial institutions to provide their customers with the ability to send and receive payments any time, any day, and have full access to those funds within seconds.

This position is a unique opportunity to be part of this mission-critical Federal Reserve initiative that is transforming the payments landscape in the United States.

This internship will be primarily on-site at our Boston office.

This position will be part of the FedNow Information Security team at the Federal Reserve Bank of Boston supporting the FedNow instant payments service.

The role will provide support for the Governance Risk and Compliance (GRC), Security Operations (SecOps), or Security Architecture (SecArch) functions within the security organization.

Responsibilities will span (but are not limited to) the following focus areas within each function:

• SecOps
o Vulnerability Management
o Offboarding
o CI/CD security tooling support
o Incident response
o Security log analysis

• GRC
o Access Management reviews, analysis, and reporting
o Onboarding/offboarding
o POAM management and reporting
o System Security Plan management
o Security training and awareness
• SecArch
o Assist the SecArch team with various tasks (e.g., library reviews)

Responsibilities

• Collaborate with risk management, threat management, incident response, security architecture, and cross-functional teams to provide security guidance and support
• Assist in the development and maintenance of Information Security policies, processes, and controls
• Review and analyze security controls to ensure they meet defined industry standards
• Perform daily/weekly operational tasks, reporting, and communication with key stakeholders
• Develop scripts to support efforts to automate a variety of security processes
• Stay up to date on emerging threats and vulnerabilities, and recommend appropriate measures to mitigate risk
• Assist with security awareness initiatives and perform research on cybersecurity topics and trends

Qualifications
• Basic understanding of information security domains including, risk management, security opera...