Information Security EngineerAre you an Information Security Engineer ready to Join Orange County's Federal Credit Union? This role is responsible for strengthening the confidentiality, integrity, and availability of our critical systems across on-prem and cloud environments.
What You'll DoAs an Information Security Engineer, you will:
The Information Security Engineer will play a critical role in evolving and maturing the organization's information security program to ensure the confidentiality, integrity, and availability of Orange County's Credit Union assets. The program includes policies, standards, guidelines, and controls to manage and prevent risks to Orange County's Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks.
ESSENTIAL FUNCTIONS:- Coordinate and perform risk and vulnerability assessments of the Credit Union's systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.
- In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization's data, systems and services on premises and in public cloud.
- Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.
- Perform daily operations and monitor events from multiple sources including, but not limited to, SIEM consoles, network and host-based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools.
- Promptly respond to all security incidents; conduct and support breach analysis in collaboration with internal partners and external parties; and provide thorough post-event analysis, documentation and recommendations.
- Provide subject matter expertise on information security in areas such as vendor risk management, application development, database design, network, platform/operating system, and cloud-based services.
- Other duties as assigned.
What You Bring- Bachelor's Degree in Computer Science, Information Security, Information Assurance or related technology field.
- 5+ years of experience in information / cyber security and IT risk management (including hands-on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
- 2+ years of hands-on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
- Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security - Specialty, Azure Security Engineer Associate.
The targeted annual salary range is $95,000.00 to $119,000.00. Final offer will be determined based on experience, education, training/certifications and specialized skills.Perks & Benefits:- Health Coverage: Comprehensive benefits, including Anthem, Delta Dental, and VSP, effective from your first day.
- Financial Security: Life insurance at no cost and a 401(k) plan with an employer match up to 6%.
- Work-Life Balance: 13 days of vacation and seven (7) sick days annually and paid holidays.
- Recognition & Growth: Annual merit increases, discretionary and referral bonuses, as well as educational grants up to $1,000 per year.
This position is currently hybrid-eligible, with the expectation of three days pre-assigned on-site attendance. This role requires California residency and living within a 50-mile commute of our headquarters in Santa Ana. 
