Intermediate Level Info Security Engineer – Privacy Infrastructure

Why USAA?

At USAA, our mission is to empower our members to achieve financial security through highly competitive products, exceptional service and trusted advice. We seek to be the #1 choice for the military community and their families.

Embrace a fulfilling career at USAA, where our core values – honesty, integrity, loyalty and service – define how we treat each other and our members. Be part of what truly makes us special and impactful.

The Opportunity

We are seeking an Intermediate Level Info Security Engineer to join our Privacy Infrastructure team. In this role, you'll be responsible for developing and maintaining systems that support the delivery and handling of USAA’s Privacy Promise to our members and that enable appropriate handling of Privacy regulatory requirements. You will diagnose and resolve application issues, providing technical support to users, and implement solutions and automation to improve system stability and performance in the most efficient way possible. This role will closely work with business, data, and IT partners to ensure our systems effectively meet the needs of our members.

Within defined guidelines and frameworks, conducts software and systems engineering to develop new capabilities, ensuring Information Security is integrated across the enterprise. Conducts comprehensive technology research to evaluate potential vulnerabilities in Enterprise systems. Identifies and manages existing and emerging risks that stem from business activities and ensures risks associated with business activities are effectively identified, measured, monitored, and controlled. Installs, configures, troubleshoots, and maintains hardware and software.

We offer a flexible work environment that requires an individual to be in the office 4 days per week. This position will be based in our San Antonio, TX facility. Relocation assistance is not available for this position.

What you'll do:

• Responsible for ensuring that security requirements are adequately addressed in all aspects of a solution/application enablement and sustainment lifecycle.
• Design, develop, code, integrate, and test complex cross functional technical solutions with a focus on security, often collaborating with Engineers or Architects within the team/department.
• Developing comprehension of Site Reliability Engineering practices in their domain.
• Ensures risks associated within their domain activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.
• Monitors and troubleshoots systems, tools, and vendor integrations.
• Supports continuous research, analysis, and troubleshooting to identify, resolve, and report on security issues.
• Collaborates with Security Analysts, IT and Business Partners to tune, harden, and enhance Security solutions and technologies to keep up with the latest trends and threats.
• Ensures risks associated with business activities are effectively identified, measured, monitored, and controlled in accordance with risk and compliance policies and procedures.

What you have:

• Bachelor’s degree; OR 4 years of related experience (in addition to the minimum years of experience required) may be substituted in lieu of degree.
• 2 years of related experience in Security Engineering and/or Information Technology with a security focus to include demonstrated experience leading enterprise technology projects or initiatives.
• 1 year of experience delivering technology solutions in all phases of a solution development lifecycle.
• Working experience with modern programming/scripting languages and frameworks.
• Developing experience implementing security engineering activities utilizing modern DevSecOps practices.
• Developing experience with agile delivery methods and deep desire to be flexible while delivering value early and often.
• Developing experience with platform engineering concepts on security best practices in infrastructure/policy as code, security architecture design patterns, security vendor integrations, and CI/CD pipelines with built in application security controls.
• Familiarity with cloud and emergent technologies such as: Public Cloud, Containerization, Security Data Lakes, ML/LLMs, GenAI, etc.

What sets you apart:

• Experience with API development
• Demonstrated proficiency in Java and Java frameworks such as Springboot, SQL, with some experience in JavaScript & UI frameworks (React).
• Experience with container-based deployments; supporting Test/Production Environments; and adhering to security policies, procedures and controls.
• Experience w