Information Security Engineer

Affinity Plus Federal Credit Union•Saint Paul, MN

1d•$92,700 - $120,500•Hybrid

About The Position

The Information Security Engineer plays a key role in protecting Affinity Plus Federal Credit Union from cybersecurity threats by designing, implementing, managing, and continuously improving the technologies and controls that support the Information Security Program. This position is responsible for maintaining and enhancing security infrastructure, supporting threat detection and response capabilities, conducting security assessments, and collaborating with internal teams and external partners to strengthen the organization’s security posture. The role serves as a technical subject matter expert and helps ensure security systems, processes, and defenses are effective against current and emerging threats while supporting the confidentiality, integrity, and availability of corporate data and resources.

Requirements

3+ years of experience in an Information Security role.
Intermediate experience in Network Administration/Architecture, Security Framework Usage, SIEM Usage.
Extensive experience in a range of threat intel/recon tools, including proprietary and open source models.
Strong understanding of security theories including Defense-In-Depth, Cyber KillChain, Assumed Breach, Zero Trust.
Ability to initiate, react to, and take direction on specific course or response, action, and mitigation that is heavily dependent and individualized to the security situation.
Ability to analyze information to solve issues and make informed, sound decisions, within established policies and procedures
Skilled in assessing needs, offering solutions, and building trust through effective consultation.
Ability to recognize operational inefficiencies and identify improvement opportunities
Proven ability to build and maintain positive working relationships with members and internal stakeholders by demonstrating professionalism, reliability, and responsiveness in daily interactions.
Ability to collaborate effectively within and across teams.
Ability to take accountability of responsibilities, commitments, and outcomes.
Strong ability to communicate clearly, effectively and professionally.
Ability to actively pursue opportunities to expand knowledge and skills; applying learning to improve performance.
Willingness to learn new skills, processes, and technologies with support and training.
Demonstrated adaptability and willingness to take on new responsibilities.
Demonstrated ability to show resilience and adaptability in the face of challenges or changes.
Intermediate computer and technology skills and knowledge, with the ability to navigate between multiple systems with ease.
Time Management skills and the ability to prioritize workload based on department and member needs.
Ability to complete tasks with accuracy and thoroughness.
Demonstrated reliability, integrity, and ability to maintain confidentiality.

Nice To Haves

Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Math, or similar field.
Certification in CISSP, GCTI, CTIA, CASP+ or equivalent.

Responsibilities

Serve as a key resource in the evaluation, selection, implementation, configuration, and ongoing management of information security tools, technologies, and platforms.
Maintain, support, and optimize the security infrastructure and technologies utilized by the Information Security Program.
Collaborate with technology teams to ensure security solutions are effectively integrated, configured, and maintained across the enterprise.
Evaluate existing security controls and recommend enhancements to improve operational effectiveness, efficiency, and security posture.
Lead the implementation and lifecycle management of security technologies, ensuring solutions remain current, supported, and aligned with organizational needs.
Collaborate with Information Security team members to develop, maintain, and continuously enhance Security Information and Event Management (SIEM) capabilities and detection strategies.
Coordinate with threat intelligence sharing organizations and security partners to facilitate the collection, analysis, and sharing of relevant threat intelligence.
Conduct threat intelligence, threat hunting, and reconnaissance activities to identify emerging threats, assess risks, and improve organizational preparedness and response capabilities.
Monitor and evaluate threat intelligence information to identify potential impacts to the organization and recommend appropriate mitigation strategies.
Act as a technical resource during the investigation, analysis, and response to security events and incidents.
Develop and maintain detection use cases, correlation rules, alerts, and dashboards to improve visibility into potential security threats and suspicious activity.
Ensure internal and external vulnerability assessments, attack surface reviews, scans, and security testing activities are conducted regularly.
Analyze assessment results and collaborate with stakeholders to prioritize remediation efforts and reduce organizational risk.
Partner with third-party security providers and internal teams to support penetration tests, security assessments, tabletop exercises, audits, and related testing activities.
Validate remediation efforts and verify identified vulnerabilities have been appropriately addressed.
Assist in the development, implementation, maintenance, and communication of enterprise-wide information security strategies, standards, procedures, and policies.
Provide technical expertise and recommendations to support strategic security initiatives and program enhancements.
Research emerging technologies, security trends, vulnerabilities, and threat landscapes to support the continuous improvement of the Information Security Program.
Collaborate with Information Technology, business stakeholders, and security partners to strengthen organizational cybersecurity capabilities.
Serve as a technical subject matter expert for information security technologies, controls, and best practices.
Partner with internal teams to provide security guidance and recommendations for projects, operational initiatives, and technology implementations.
Support awareness and education efforts by sharing technical security knowledge and best practices with stakeholders across the organization.
Build and maintain productive relationships with internal teams, vendors, industry groups, and external security partners.
Other duties as assigned