Information Security Engineer

O. C. Credit Union•Santa Ana, CA

24d•$100,000 - $125,000

About The Position

The Information Security Engineer will play a critical role in evolving and maturing the organization’s information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes: policies, standards, guidelines, and controls to manage and prevent risks to Orange County’s Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks.

Requirements

Bachelor’s Degree in Computer Science, Information Security, Information Assurance or related technology field.
5+ years of experience in information / cyber security and IT risk management (including hands-on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
2+ years of hands-on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security – Specialty, Azure Security Engineer Associate.

Responsibilities

Coordinate and perform risk and vulnerability assessments of the Credit Union’s systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.
In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization’s data, systems and services on premises and in public cloud.
Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.

Benefits

Medical, Dental, and VSP effective day one of employment!
Life insurance at no cost to you
Robust 401(k) plan where we contribute up to 8%.
Generous days of vacation
Seven (7) sick days per year
Paid holidays
Educational grants up to $2,000 per year
Step progression opportunities
Annual performance merit increases
Annual discretionary bonus
Supportive work environment that celebrates achievements and fosters collaboration