Assistant Manager Cybersecurity-Hybrid

Logix Federal Credit Union•Valencia, CA

12d•Hybrid

About The Position

The Assistant Manager, Cybersecurity Engineering supports the Manager, Assistant CISO in designing, implementing, operating, and continuously improving Logix’s cybersecurity controls. This hands-on technical leadership role translates security strategy, architecture, risk requirements, and regulatory expectations into practical capabilities that protect member data, employees, digital services, cloud environments, and enterprise infrastructure. The Assistant Manager provides day-to-day technical support across endpoint, network, identity, data, cloud, vulnerability management, detection and response, security automation, and artificial intelligence security. The role also provides managerial direction for assigned team members and serves as a backup and escalation point for cybersecurity engineers and subject matter experts reporting through the Manager, Assistant CISO. The role supports the secure adoption of AI-enabled cybersecurity capabilities and helps reduce risks related to generative AI, agentic AI, shadow AI, data leakage, prompt injection, insecure integrations, model and supply-chain exposure, excessive permissions, and AI-enabled attacks. It builds and maintains automation while preserving human oversight for material decisions, and reviews AI-generated recommendations and automated actions before production use. The position also supports regulatory examinations, audits, risk assessments, and remediation activities applicable to a federally insured credit union.

Requirements

A minimum of 5 years of progressive cybersecurity experience, including hands-on experience supporting security engineering, security operations, major security programs, or cross-functional technical initiatives.
Strong working knowledge of cybersecurity architecture, engineering, operations, threat detection, incident response, vulnerability management, identity security, data protection, and cloud security.
Working knowledge of NIST Cybersecurity Framework 2.0, NIST AI Risk Management Framework, CIS Controls and Benchmarks, Zero Trust, MITRE ATT&CK, PCI DSS, GLBA, NCUA requirements, and FFIEC guidance.
Ability to translate risks and regulatory requirements into clear technical controls, engineering tasks, measurable outcomes, and concise reporting.
Strong troubleshooting, systems thinking, analytical judgment, and root-cause analysis skills across complex hybrid environments.
Ability to balance risk reduction, member protection, user experience, operational resilience, cost, and business delivery.
Clear written and verbal communication skills and ability to work effectively with engineers, leaders, auditors, regulators, vendors, and business partners.
Ability to support incidents, competing priorities, incomplete information, and rapid changes in threats and technology.
Commitment to continuous learning, ethical use of AI, secure innovation, documentation, and knowledge sharing.

Nice To Haves

Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field; equivalent relevant experience may be considered.
1 to 3 years of experience in financial services, credit unions, banking, or another regulated industry is strongly preferred.
Experience supporting vendors, managed security providers, service levels, technical escalations, and product roadmaps.

Responsibilities

Support the design, implementation, configuration, integration, and lifecycle management of enterprise cybersecurity platforms and technical controls.
Provide hands-on technical support for endpoint detection and response, network security, identity and privileged access management, data loss prevention, cloud security, vulnerability management, security monitoring, incident response, email security, and application security.
Assist with engineering standards, secure configuration baselines, reference architectures, technical procedures, runbooks, and exception requirements using secure-by-design and Zero Trust principles.
Provide day-to-day managerial direction for the assigned team, including work intake, prioritization, capacity planning, technical coaching, cross-training, performance input, documentation quality, and backup coverage for engineering subject matter experts.
Partner with Information Technology, Enterprise Architecture, Infrastructure, Networking, Cloud, Application, Data, Legal, Compliance, Internal Audit, and business teams to embed security into projects and technology decisions.
Support vulnerability scanning, penetration testing, threat exposure management, remediation governance, attack-surface reduction, and risk-based prioritization; track findings through closure or an approved exception process.
Improve security monitoring by helping develop and tune detections, use cases, dashboards, alert thresholds, response workflows, integrations, and automated playbooks.
Support measurement of control effectiveness using service levels, key performance indicators, and key risk indicators.
Serve as a hands-on technical escalation point during cybersecurity incidents; support investigation, containment, eradication, recovery, evidence preservation, lessons learned, and improvements to incident response plans and playbooks.
Evaluate security architecture and controls for cloud platforms, SaaS solutions, third parties, new products, and major technology changes; help confirm required logging, identity, encryption, data protection, resiliency, and monitoring controls before production use.
Support relationships, service performance, technical roadmaps, and escalation paths with managed security providers and cybersecurity vendors.
Assist with regulatory examinations, internal and external audits, risk assessments, control testing, and remediation activities applicable to a federally insured credit union.
Prepare concise technical and executive-ready updates on security posture, operational risk, incidents, vulnerabilities, project delivery, tool performance, and remediation progress.
Maintain awareness of emerging threats, attacker techniques, vulnerabilities, regulatory expectations, and technology developments; recommend practical improvements aligned with Logix’s risk profile and business priorities.
Support secure adoption of AI-enabled cybersecurity capabilities for threat detection, investigation, alert triage, threat hunting, vulnerability prioritization, incident response, and analyst productivity.
Help assess and reduce risks involving generative AI, agentic AI, shadow AI, data leakage, prompt injection, insecure integrations, model and supply-chain exposure, excessive permissions, and AI-enabled attacks.
Assist with technical guardrails for enterprise AI use, including identity, access, data classification, logging, monitoring, human review, testing, third-party risk, and secure configuration requirements.
Partner with governance and business stakeholders to align AI security practices with the NIST AI Risk Management Framework, its Generative AI Profile, applicable financial-services guidance, and Logix policies.
Build and maintain automation using APIs, scripting, orchestration, and workflow platforms to reduce repetitive work, improve consistency, and accelerate response while preserving human oversight for material decisions.
Review AI-generated recommendations and automated actions for accuracy, explainability, privacy, security, bias, operational impact, and auditability before production use.
Perform other duties as assigned by the Manager, Assistant CISO or Chief Information Security Officer.