Cyber Security Engineer 3

AAA•Costa Mesa, CA

16h

About The Position

Under general direction, the Cyber Security Engineer 3 performs procedures necessary to protect information systems assets from intentional or inadvertent access or destruction. The role interfaces with the user community to understand security needs and implements procedures and processes that protect the Club while supporting effective business outcomes. It helps ensure Club employees and contractors understand and follow required security procedures. The position requires practitioner-level familiarity with the Club Information Security program and related applications, infrastructure, cloud services, and Information Systems architectures. It evaluates the security level and controls appropriate to desired outcomes, applying sound judgment to balance business needs and security concerns and communicate issues to management and peers. This role serves as a team lead and senior technical leader, providing day-to-day leadership, technical direction, work coordination, mentoring, and coaching to Security Analysts and Engineers. It secures and validates AI-enabled technologies through assessments, adversarial testing, and control validation, and applies statistical analysis and machine learning to security data to improve threat detection, signal quality, risk prioritization, and identification of emerging threats. The engineer partners across security and business functions to turn insights into actionable controls, detection, and response capabilities. The engineer develops and implements information security architectures and solutions; researches and advocates technologies, architectures, standards, and security products; and works with architects and security specialists to ensure solutions mitigate risks and meet business and regulatory requirements. The position assesses business impact and exposure from emerging threats, vulnerabilities, and risks, and communicates risks and solutions to business partners and IT staff. It also leads incident response and technical and forensic investigations, supports security operations and monitoring, develops sustainable operational use of security tools and surveillance capabilities, and guides vendor engagements. Occasional travel to off-site business meetings or conferences is required (5%). The starting pay range is $176,600.00–$235,500.00. Full-time employees are eligible to participate in an incentive program based on organization, team, and personal performance.

Requirements

Bachelor’s degree in Computer and Information Science.
10 or more years of experience in information security.
Demonstrated expertise securing AI-enabled technologies, including generative AI, large language models, agents, and API integrations.
Knowledge of identity and access controls, data protection, security monitoring, prompt injection, adversarial testing, and AI misuse risks.
Proven experience applying advanced analytical methods to develop and validate security analytics across cloud and enterprise environments.
Demonstrated readiness to lead technical teams through work coordination, mentoring, decision-making, and accountable execution.
Ability to work as a project leader or subject matter expert on multiple high-complexity projects requiring in-depth knowledge.
High-level technical and analytical skills and systems knowledge to design and implement complex system security solutions.
Decision-making and problem-solving skills to integrate security procedures into business processes.
Occasional travel to off-site business meetings or conferences (5%).

Nice To Haves

Comprehensive knowledge of cross-platform technical principles, security practices, and procedures for private and public cloud computing, mainframes, distributed systems, desktop computers, laptops, tablets, phones, and workstations.
Knowledge of one or more cloud service provider platforms (AWS, GCP, or Azure) and security controls such as Prisma or CASB.
Conceptual understanding of data network configuration and infrastructure, including TCP/IP routers, internet/intranet/extranet, firewalls, web servers, and security hierarchy.
Knowledge of encryption key infrastructures and authentication processes.
General knowledge and experience with security technologies, including public and private key encryption, digital certificates, Kerberos, challenge/response, smart cards, Secure ID or one-time-password authentication mechanisms, Java, HTML-5, and ActiveX.

Responsibilities

Serves as a team lead and senior technical leader, coordinating work and providing technical direction, mentoring, and coaching to Security Analysts and Engineers.
Secures and validates AI-enabled technologies through security assessments, adversarial testing, and control validation; identifies risks and drives controls, mitigation, and remediation.
Applies statistical analysis and machine learning to security data to develop analytics that improve threat detection, signal quality, risk prioritization, and identification of emerging threats.
Partners across security and business functions to translate analytical insights into actionable controls, detection, and response capabilities.
Develops and implements cost- and outcome-effective information security architectures and solutions, independently or with peers, departments, vendors, and management.
Researches, designs, and advocates technologies, architectures, standards, and security products that support enterprise, customer, and business-partner security requirements.
Works with architects and security specialists to ensure adequate security solutions mitigate identified risks and meet business objectives and regulatory requirements.
Analyzes business impact and exposure related to emerging security threats, vulnerabilities, and risks; communicates risks and solutions to business partners and IT staff.
Provides performance guidance, training, technical direction, and role-model leadership to less experienced staff.
Develops and implements sustainable operational use of security appliances, software, and surveillance capabilities.
Evaluates, manages, and guides vendor engagements and resources to achieve information security outcomes.
Provides technical leadership for incident response, minimizing impact and conducting technical and forensic investigations into breaches and their extent.
Supports security operations by monitoring security controls for breaches and leading or conducting investigations as appropriate.
Designs and implements complex system security solutions for operational needs and integrates information security procedures into business processes.

Benefits

Medical, dental, and vision coverage
401(k) savings plan with company match
Pension
Tuition assistance
Floating holidays
PTO for community volunteer programs
Paid parental leave
Wellness programs
Employee discounts for membership, insurance, travel, entertainment, services, and more
Incentive program for eligible full-time employees