Wintrust Financial Corporation
Senior Network Security Engineer
Full details on LinkedIn
The complete job description, requirements, and application details are available on the original posting.
About Wintrust Financial Corporation
Wintrust Financial Corporation is a financial holding company based in Rosemont, Illinois, established in 1991. It aims to provide an alternative to large banks by offering personalized community banking services. The company operates over 175 community bank locations, primarily in the Chicago metropolitan area, southern Wisconsin, northwest Indiana, west Michigan, and southwest Florida. Wintrust offers a wide range of financial services, including personal and commercial banking, wealth management, mortgage services, and insurance-related financial products. Its community bank subsidiaries focus on customer-oriented solutions and actively engage with local communities through financial education and events. Additionally, Wintrust operates non-bank businesses like FIRST Insurance Funding and Wintrust Life Finance, catering to commercial and life insurance loan needs. The company emphasizes a customer-first approach, combining the resources of a large institution with the personalized attention of smaller banks.
Security at Wintrust Financial Corporation
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
“Wintrust's AppSec team focuses on ensuring the software development lifecycle (SDLC) adheres to security best practices and supports product engineering/software development and Infrastructure engineering/operations teams in securing the company's products portfolio. The Chief Security Officer, Jack Burback, involves volunteers from his teams to identify threats and opportunities and create recommendations. Explicit statements on their overall AppSec mission, risk philosophy, or specific pain points/goals are not publicly available.”
Security Team
- Jack Burback is the EVP, Chief Security Officer at Wintrust Financial.
- He has established innovation teams to create new resources and develop subject matter expertise in cybersecurity.
- While the specific organizational structure and team size for the AppSec team are not publicly detailed, a job posting for a 'Systems Engineer – Application Security' indicates the presence of an Application Security team.
- This role involves supporting product engineering/software development and infrastructure engineering/operations teams, and participating in application security reviews, threat modeling, code review, and dynamic testing.
Key Initiatives
Wintrust integrates security into the software development lifecycle (SDLC), with AppSec engineers supporting product and infrastructure teams to secure the company's product portfolio. This includes 'shift left' practices such as ensuring SDLC adherence to security best practices, application security reviews, threat modeling, code review, and dynamic testing. While details on vulnerability intake are not publicly available, there is a focus on 'faster remediation of threats'. The CISO has established 'innovation teams' to create new resources and develop subject matter expertise. Specifics on a Security Champions Program or detailed secure SDLC artifacts beyond general reviews are not publicly available.
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.