Cyber Security Engineer

Pay Grade: 13 Work Schedule: Hybrid primary functions: The Cyber Security Engineer implements, tests, maintains, monitors and reports on the organization’s information security in order to protect the Credit Union’s assets and prevent unauthorized access to Credit Union systems.
This includes implementing strategies which mitigate risk to IT systems from internal and external exposures.
responsibilities: Design and develop security solutions to reduce cybersecurity risks and protect the business, brand, and members.
Play a key role in research, process improvements, standards development, and security engineering to effectively manage security risks.
Implement and maintain security solutions to reduce cybersecurity risks on-premises, cloud solutions, and protect the business, brand, and members.
Contribute to security projects, risk evaluations, and provide technical guidance and mentorship to the team.
Develop, implement, and manage multi-level security strategies and solutions across various platforms while collaborating with infrastructure, network engineering staff and managers to enhance existing security technologies.
Oversee and evaluate system, network, and endpoint security, promptly responding to incidents and violations, while actively managing risk and escalating any member-impacting issues.
Study threat actor techniques, develop detection capabilities, and maintain a current knowledge of security industry trends, products, and events.
Provide incident response support, diagnose complex security issues, and effectively communicate security activities and metrics to management.
Act as an expert for security tool portfolio, resolving issues and incidents efficiently.
Contribute to the development of meaningful security metrics, ensure up-to-date system documentation, and provide security awareness training to members and staff.
Foster teamwork, participate in Information Security Steering internal and external audits, assisting in determining appropriate responses and validation of results and mitigations while adhering to change management policies when developing and documenting system changes.
Recommend new technologies, testing, integrations and assist in deploying solutions.
Perform miscellaneous duties as assigned.
Comply with all Federal regulations, Credit Union policies and procedures, including Bank Secrecy and the USA Patriot Act.
Perform job duties in accordance with the Credit Union's values, mission and vision.
minimum requirements: Minimum 4 years of relevant experience.
Bachelors Degree in Information Technology or related field.
Preferred Security Certifications: GIAC Web Application Penetration Tester (GWAPT), GIAC Penetration Tester (GPEN), Certified Ethical Hacker (CEH), Certified Information Systems Security Professional (CISSP), Certified Cloud Security Professional (CCSP), and/or Certified Information Security Manager (CISM) Comfort with securing private cloud environments with a preference for Microsoft Azure.
Strong working knowledge of performing security risk assessments using the FFIEC, PCI DSS, NIST, and ISO regulations and frameworks.
Foundational understanding of information security governance, risk, and assurance concepts applied within a complex enterprise environment.
Prior knowledge of Symitar back office operations a plus.
Self-starter with the ability to work independently.
Ability to clearly and concisely communicate technical information to non-technical users at middle management and higher levels.
Ability to independently initiate appropriate action in case of emergency involving computer systems.