Cybersecurity Engineer

Redwood Credit Union•Napa, CA

4d•$130,054 - $144,609

About The Position

Redwood Credit Union is seeking a Cybersecurity Engineer to establish and implement security policies, practices, technologies, and tools that protect critical information resources across cloud, network, application, and infrastructure environments. The role focuses on identity and access management, incident response, and security engineering. The engineer collaborates with architects, engineers, developers, internal audit, business units, and management to ensure effective security controls are implemented and maintained as technology changes. The role also promotes security awareness and continually improves the organization’s security posture in line with industry best practices and internal, Member, and regulatory needs. The Cybersecurity Engineer selects, implements, and supports security tools; conducts security assessments and penetration tests; designs and monitors security controls; develops threat-hunting capabilities and automation; manages SIEM and alert escalation; reviews project designs; responds to incidents and performs forensic analysis; and maintains security frameworks, roadmaps, awareness programs, architecture documentation, standards, policies, and guidelines. The role also leads the security portion of audits and prepares security reports for executives. The position contributes to department development through project recommendations and planning, mentorship, identifying learning opportunities, and drafting technology plans. Other duties include maintaining technical proficiency, building community relationships, and participating in community events and organizations. The ideal candidate has education and experience equivalent to a bachelor’s degree in computer science or a closely related field, along with at least eight years of IT experience, including at least four years in cybersecurity. The base starting salary range is $130,054 to $144,609 annually, commensurate with experience. Redwood Credit Union offers eligible employees a competitive total rewards package, including medical, dental, vision, financial, and other benefits.

Requirements

Experience with Azure Cloud or hybrid environments; Windows and Linux server administration; Cisco networking; VPN/SASE platforms; XDR endpoint protection; and Exchange and email protection products.
Experience with security tools such as Nessus/Tenable, Rapid7, and Cobalt Strike, and with vulnerability management and patching tools such as SCCM or Ivanti.
Ability to work with multiple technical teams and departments, break down complex problems, and communicate clear recommendations to all levels of the business.
Ability to work with external vendors managing cybersecurity services, including external SOC, brand reputation and protection, and incident response teams.
Current knowledge of information technology security processes, procedures, rules, and regulations, and ability to apply that knowledge in the role.
Ability to effectively use project, change, and incident management skills and documentation.
Ability to work independently with little supervision or direction.
Ability to develop and implement technology projects.
Ability to interact and communicate with external vendors and internal clients.
Effective verbal and written communication skills.
Ability to establish and maintain effective working relationships with a diverse group of people.
Education and experience equivalent to a bachelor’s degree in computer science or a closely related field.
At least eight years of IT experience, including at least four years in cybersecurity.
Ability to stand, bend, stoop, sit, walk, twist, and turn; occasionally stand for extended periods; travel to different locations; occasionally lift up to 50 pounds; and use a computer keyboard, calculator, and mouse.

Nice To Haves

Azure Security Engineer or Administration certification.
CCNA certification.
CISSP certification.
CEH certification.

Responsibilities

Select, implement, and support security tools and systems for preventative, detective, and analysis purposes.
Conduct regular security assessments and red/purple team penetration tests with external vendors and internal tools.
Provide security engineering across application, network, cloud, and infrastructure security domains.
Design, implement, and monitor security controls against CIS v8.1 and NIST CSF 2.0.
Develop threat-hunting and analytic rules, playbooks, connectors, and automations, incorporating threat intelligence into detections and analytics.
Manage SIEM and alerting, serve as the final escalation point for alerts, and lead investigations across security products.
Review projects and designs for appropriate security policies, procedures, and controls; assist in designing security environments for new and existing systems.
Respond to security incidents, lead resolution, conduct post-resolution forensic analysis, and recommend and implement measures to prevent or mitigate future incidents.
Research vendor offerings and industry trends and recommend software, process, and policy solutions.
Create and maintain a security framework, roadmap, awareness program, architecture design and documentation, and security technical standards, policies, and guidelines.
Lead the security portion of regulatory and internal audits.
Prepare and present written and verbal security reports, analyses, and summaries to the CEO and executives.
Automate routine work and alerting.
Prepare and present recommendations and updates on projects, support, and future needs planning.
Mentor the cybersecurity team and IT staff on security-related issues.
Identify learning opportunities to enhance knowledge of department practices.
Draft and recommend technology plans and requirements for business needs.
Maintain technical proficiency with current and prospective hardware and software.
Establish and maintain relationships with community contacts, including volunteer centers and nonprofit organizations.
Participate in community events, volunteer boards, and associations.
Perform other duties as assigned.

Benefits

Competitive medical, dental, and vision insurance.
Mental health offerings.
Employee performance incentive plan.
Performance-based merit salary advancement.
401(k) program with employer match.
Competitive PTO accrual.
11 paid company holidays and birthday off.
Discounts on RCU standard collateral auto loans, recreational or boat loans, Visa and line-of-credit loans.
Zero-interest loans for eligible immigration-related expenses and naturalization expenses.
Zero-interest loan for garment, fitness, or home office equipment.
100% financing for employee-purchased homes.