Cybersecurity Engineer

Redwood Credit Union•Napa, CA

4d•$130,054 - $144,609

About The Position

Redwood Credit Union is seeking a Cybersecurity Engineer to establish and implement security policies, practices, technologies, and tools that protect critical information resources across cloud, network, application, and infrastructure environments, with a focus on identity and access management, incident response, and security engineering. The role collaborates with architects, engineers, developers, internal audit, business units, and management to ensure effective security controls are in place and maintained as the technology environment changes. It also promotes information security awareness and continual improvement in alignment with industry practices and internal, member, and regulatory needs. The Cybersecurity Engineer selects and supports security tools; conducts security assessments and penetration testing; designs and monitors security controls; develops threat-hunting and detection capabilities; manages SIEM alerting and investigations; and responds to and analyzes security incidents. The position also reviews projects and designs, provides recommendations to prevent future incidents, maintains security frameworks and documentation, leads security-related audits, and communicates reports and recommendations to executives. Department responsibilities include project planning, mentoring, professional development, and maintaining technical proficiency. The role also participates in community events and performs other duties as assigned. The ideal candidate has education and experience equivalent to a bachelor's degree in computer science or a related field, at least eight years of IT experience, and at least four years in cybersecurity. The stated base starting salary range is $130,054 to $144,609 annually, commensurate with experience. Redwood Credit Union offers a competitive total rewards package and a range of benefits to eligible employees.

Requirements

Experience with Azure Cloud or hybrid environments, Windows and Linux server administration, Cisco networking, VPN/SASE platforms, XDR endpoint protection, Exchange, and email protection products.
Experience with security tools such as Nessus/Tenable, Rapid7, and Cobalt Strike, and with vulnerability management and patching tools such as SCCM or Ivanti.
Ability to work with multiple technical teams and departments, break down complex problems, and explain recommended solutions clearly to all levels of the business.
Ability to work with external vendors supporting the cybersecurity program, including external SOC teams, brand reputation and protection teams, and external incident response teams.
Current knowledge of information technology security processes, procedures, rules, and regulations, and ability to apply this knowledge in the role.
Ability to use project, change, and incident management skills and documentation effectively.
Ability to work independently with little supervision or direction.
Ability to develop and implement technology projects.
Ability to interact and communicate with external vendors and internal clients.
Effective verbal and written communication skills.
Ability to establish and maintain effective working relationships with a diverse group of people.
Education and experience equivalent to a bachelor's degree in computer science or a closely related field.
At least eight years of IT experience, including at least four years in cybersecurity.
The posting lists Azure Security Engineer/Administration, CCNA, CISSP, and CEH under Licenses and Certifications.

Responsibilities

Select, implement, and support security tools and systems for prevention, detection, and analysis.
Conduct regular security assessments and red-team or purple-team penetration tests with external vendors and internal tools.
Provide security engineering across application, network, cloud, and infrastructure security.
Design, implement, and monitor security controls against CIS v8.1 and NIST CSF 2.0.
Develop threat-hunting and analytic rules, playbooks, connectors, and automations, incorporating threat intelligence into detection rules and analytics.
Manage SIEM and alerting, serve as the last line of escalation for alerts, and lead investigations across security products.
Review projects and designs for appropriate security policies, procedures, and controls, and assist with security environment design for new and existing systems.
Respond to security incidents, lead resolution of security issues, perform post-resolution forensic analysis, and recommend and coordinate measures to prevent or mitigate future incidents.
Research vendor offerings and industry trends and recommend software, process, and policy solutions.
Create and maintain a security framework, roadmap, awareness program, architecture design and documentation, and technical standards, policies, and guidelines.
Lead the security portion of regulatory and internal audits.
Prepare and present written and verbal security reports, analyses, and summaries to the CEO and executives.
Automate routine work and alerting.
Prepare and present recommendations and updates on projects, support, and future needs planning.
Mentor the cybersecurity team and IT staff on security-related issues.
Identify learning opportunities to improve knowledge of department practices.
Draft and recommend technology plans and requirements for business needs.
Maintain technical proficiency with current and prospective hardware and software.
Establish and maintain relationships with community contacts, including volunteer centers and nonprofit organizations, and participate in community events, volunteer boards, and associations.
Perform other duties as assigned.

Benefits

Competitive medical, dental, and vision insurance
Mental health offerings
Employee performance incentive plan
Merit increases based on performance
401(k) program with employer match
Competitive PTO accrual
11 paid company holidays
Birthday off
Discounts on RCU collateral auto loans, recreational or boat loans, Visa products, and lines of credit
Interest-free loans for certain immigration-related and naturalization expenses
Interest-free loan for garment, fitness, or home office equipment
100% financing for employee-purchased homes