Information Security Engineer II

Arizona Financial Credit Union•Phoenix, AZ

2d•Hybrid

About The Position

The Information Security Engineer II supports the protection of the organization’s systems and information assets by monitoring security controls, administering security technologies, and responding to information security events. The role serves as an escalation resource for incident handling; supports vulnerability management, firewall, email security, and remote connectivity activities; conducts technical security reviews; and helps maintain security documentation and audit readiness. The position also participates in organizational projects to help ensure security standards are effectively implemented and the organization’s security posture is maintained. The position works in a hybrid environment. Employees who work from home must have business operational internet for work tasks and communication via video call or chat messaging systems, and must maintain a dedicated workspace.

Requirements

Bachelor’s degree in Information Security, Computer Science, or a similar field and five years of enterprise IT experience, including at least three years of information security experience, or an equivalent combination of education and experience in lieu of a degree.
In-depth knowledge of Microsoft operating systems and Active Directory, including Windows Workstation, Windows Server, and Group Policy.
Experience with log aggregation and Security Information and Event Management (SIEM) software.
Proficient knowledge of networking concepts within layers 1 through 4 of the OSI model.
Experience managing and monitoring firewalls, responding to anti-virus alerts, and recognizing when security events require escalation.
Knowledge of the NIST Cybersecurity Framework, CIS benchmarks, security industry best practices, and their application to technical reviews of software and data center controls.
Experience with email security gateways and knowledge of email flow.
Ability to analyze security information, troubleshoot technical issues, document findings, and communicate effectively with technical and nontechnical partners.

Nice To Haves

Certified Ethical Hacker (CEH).
CompTIA A+, Security+, and/or Network+.
Certified Information Systems Security Professional (CISSP).
Cisco Certified Network Associate (CCNA).
GIAC Certified Incident Handler (GCIH).
GIAC Certified Intrusion Analyst (GCIA).
GIAC Certified Security Essentials (GSEC).
Palo Alto Certified Network Security Engineer (PCNSE).

Responsibilities

Serve as a second-tier escalation point for information security incidents, identifying and triaging incidents according to the incident response plan.
Proactively monitor the network, access controls, and information security controls.
Perform daily administrative tasks on security systems to ensure they are operational and high performing.
Monitor and develop log aggregation and correlation software for first response, prioritization, and escalation of security threats, including developing techniques to detect malicious network behavior.
Execute organizational phishing campaigns, operate phishing tools, and assist with security awareness training.
Assist with the vulnerability management program by communicating new security threats to appropriate work teams and validating remediation.
Improve and maintain security documentation, including data flow diagrams, network topology, and security benchmarks for various systems.
Maintain and respond to alerts from the anti-virus software suite.
Support mail flow on the email security gateway, analyze quarantined email, and configure data loss prevention controls.
Assist with maintenance and monitoring of internal, external, and virtual firewalls.
Engage in organizational projects to help ensure security standards are implemented successfully.
Conduct technical security reviews of new and existing software vendors.
Assist with gathering documentation for third-party and regulatory audits.
Document workplans and changes to security systems and participate in the Change Advisory Board.
Troubleshoot remote connectivity issues for employees and third-party vendors.
Build and troubleshoot IPsec VPN tunnels between third-party vendors, including creating appropriate firewall rules to maintain the existing security posture.
Perform other job-related duties as assigned.