Information Security Engineer

O. C. Credit Union • Santa Ana, CA

7d • $95,000 - $119,000 • Hybrid

About The Position

This role is responsible for strengthening the confidentiality, integrity, and availability of our critical systems across on‑prem and cloud environments. The Information Security Engineer will play a critical role in evolving and maturing the organization’s information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes policies, standards, guidelines, and controls to manage and prevent risks to Orange County’s Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks.

Requirements

• Bachelor’s Degree in Computer Science, Information Security, Information Assurance or related technology field.
• 5+ years of experience in information / cyber security and IT risk management (including hands-on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
• 2+ years of hands-on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
• Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security – Specialty, Azure Security Engineer Associate.

Responsibilities

• Coordinate and perform risk and vulnerability assessments of the Credit Union’s systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.
• In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization’s data, systems and services on premises and in public cloud.
• Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.
• Perform daily operations and monitor events from multiple sources including, but not limited to, SIEM consoles, network and host-based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools.
• Promptly respond to all security incidents; conduct and support breach analysis in collaboration with internal partners and external parties; and provide thorough post-event analysis, documentation and recommendations.
• Provide subject matter expertise on information security in areas such as vendor risk management, application development, database design, network, platform/operating system, and cloud-based services.
• Other duties as assigned.

Benefits

• Health Coverage: Comprehensive benefits, including Anthem, Delta Dental, and VSP, effective from your first day.
• Financial Security: Life insurance at no cost and a 401(k) plan with an employer match up to 6%.
• Work-Life Balance: 13 days of vacation and seven (7) sick days annually and paid holidays.
• Recognition & Growth: Annual merit increases, discretionary and referral bonuses, as well as educational grants up to $1,000 per year.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior