Information Security Engineer

Description

YOUR PURPOSE

The Information Security Engineer is responsible for the design of the Credit Union’s cybersecurity systems to protect computer systems and networks. This position is also responsible for facilitating the confidentiality, integrity, and availability of all member data, and protecting its infrastructure from internal and external threats and vulnerabilities and ensures Credit Union compliance with statutory and regulatory requirements regarding information access, security, and privacy as it pertains to PCI, GLBA, or as directed. This position is materially responsible for designing, integrating, implementing, and managing all enterprise network security systems, solutions, and services. Insofar, these responsibilities also consist of providing senior-level engineering, analysis, consultation, programming, and the identification, reporting, and resolution for security problems, high-risk exposure(s), and regulatory compliance. The Information Security Engineer will work in collaboration with the Information Security and Infrastructure teams to provide support for security tools and technologies such as firewalls, proxy servers, remote/VPN access, and other technologies as directed.

YOU ARE RESPONSIBLE FOR

Security Architecture

• Architect and approve the design of all credit union information security systems, to include identification, authorization, and access processes and procedures
• Design, monitor and manage all Information Security defense and authentication/authorization systems and programs
• Provide guidance and advocacy regarding prioritization of infrastructure investments relating to all matters of information and cybersecurity
• Provide analysis for information security trends internal and external to the organization and communicate all security related issues and activities affecting the credit union to the Information Security Officer
• Participate in the performance of risk assessments or execution of system tests to ensure the functioning of data processing activities or security measures
• Detect and understand potential/actual threats, vulnerabilities, security, and compliance controls; direct the remediation, and communicate issues to the appropriate Information Technology leadership or Senior Manager
• Ensure annual audits and assessments meet requirements 

Security Systems Engineering

• Design, engineer, and implement security solutions to support the technology blueprint and digital assets of the Credit Union
• Develop and maintain current network and information security architecture and design documentation
• Assess network and systems operational risk before, during, and after systems and services commission and decommission, to include all services moved to cloud-based technologies
• Provide technical and organizational leadership in specialized areas of network and information security standards, practices, and procedures
• Lead security design review and threat modeling for new features and functionality as it relates to existing and new systems and services
• Perform risk analysis of engineering initiatives and production services; prioritize projects requiring focused testing; and manage vulnerability remediation processes for multiple departments and business units

Analysis and Administration

• Responsible for the security administration of enterprise-wide system and applications to ensure compliance with processes and procedures
• Monitor security vulnerabilities by analyzing a variety of network and host-based security appliance logs and determine the correct remediation action(s) and/or escalation path for each incident
• Engage with vendors as needed, and create use-cases for security operation monitoring
• Conduct and report on investigations of information security breaches to identify vulnerabilities and evaluate the damage
• Review security assessments for computing environments or assess for compliance with cybersecurity standards and regulations
• Provide support for staff training and oversee the use of information security standards, policies, and best practices as directed

SUCCESS LOOKS LIKE

Our individual contributor success competencies, coupled with our CORE Values, drive our ability to fulfill our Promise of "Guiding members in the direction of their dreams".

• Action Oriented: Takes on new opportunities and tough challenges with a sense of urgency, high energy, and enthusiasm.
• Collaborates: Builds partnerships and works collaboratively with others to meet shared objectives. Readily takes action on challenges, without unnecessary planning. 
• Instills Trust: Gains the confidence and