Security Engineer

ABOUT REDWOOD CREDIT UNION (RCU):At Redwood Credit Union, our mission is to passionately serve the best interests of our Members and communities. Since 1950, we have been dedicated to supporting the financial well-being of our Members through better rates, low or no fees, and best-in-class customer service. Our purpose is to inspire hope and elevate the financial well-being of our communities one person at a time, through good times and bad. As a not-for-profit financial institution, we are committed to a people-first approach, which is reflected not only in how we serve our Members, but also in how we treat our employees. Our leadership team is deeply focused on fostering a culture of heart and empathy, integrity, passion, inclusion, meaningful relationships, excellence, and ensuring financial well-being for all.   Why work for Redwood Credit Union?•   32nd largest credit union in the U.S. and the largest financial institution based in the North Bay •   Awarded a 5-Star Rating based on 6/30/24 financial data by Bauer Financial•   Recognized by Newsweek as one of "America's Best Credit Unions 2024"•   Recognized by Forbes as one of “America’s Best Small Employers 2023" •   Voted Best Places to Work in the North Bay 19 years in a row•   World-class Employee Engagement scores•   Rated Superior in Service by more than 90% of Members, surveyed by SF Gate•   Industry leading Net Promoter Scores across the U.S.                                                                                                                                                                                                                                              Join us and discover why you'll love working at Redwood Credit Union! 
Redwood Credit Union is looking for a Security Engineer, who will be responsible for establishing and implementing security policies, practices, technologies and tools to protect Redwood Credit Union’s critical information resources. The role will collaborate with architects, engineers, developers, internal audit, lines of business, and management to ensure efficient and effective security controls are in place and maintained in a continually changing technology environment. In addition, this role will promote information security awareness throughout the company to engage team members. The role will be focused on continually improving security posture by following industry best practices and meeting internal, Member, and regulatory needs.
Essential FunctionsSecurity Engineering• Select, implement, and support security tools and systems for preventative, detective, and analysis purposes.• Conduct regular security assessments.• Design, implement, and monitor security controls.• Review new projects and designs for appropriate security policies, procedures, and controls. Assist with the design of security environments for new and existing systems.• Respond to security incidents as a first responder, lead the resolution of security issues, and perform forensic analysis post resolution. Provide analysis and recommendations to prevent or mitigate future incidents, and work with any and all teams necessary to implement the recommendations.• Research new vendor offerings and industry trends and recommend new software, process, and policy solutions.• Create and maintain a security framework, security roadmap, security awareness program, security architecture design and documentation, and technical standards, policies, and guidelines related to security.• Lead the security portion of regulatory and internal audits.• Prepare and present written and verbal security reports, analysis, and summaries to the CEO, executives, and Board.• Automate routine work and alerting.
Department Development• Prepare and present recommendations and updates on projects, support and future needs planning both in writing and verbally.• Provide mentorship to the IT staff on security related issues.• Locate and choose new learning opportunities to enhance and further knowledge of Department practices.• Draft and recommend technology plans and requirements for business needs.
Other Functions• Maintain technical proficiencies on current and prospective hardware and software.• Establish and maintain relationships with key contacts in the community including volunteer centers and non-profit organizations.• Participate in community events, community volunteer boards & associations.

Minimum Qualifications: Knowledge, Skills and Abilities

• Current knowledge of processes, procedures, rules, and regulations pertaining to information technology security, with ability to demonstrate understanding in execution of duties.
• Ability to effectively utilize project, change and incident management skills and documentation.
• Ability to work