MIS Security Engineer

Wildhorse Resort & Casino•Pendleton, OR

4d•$90,000 - $125,000

About The Position

This senior, hands-on technical leadership role builds and operates a practical cybersecurity program to protect WRC’s systems, data, and 24/7 business operations. Working with the IT Manager, the Security Engineer translates business risks into security priorities, implements and tests controls, and leads detection and incident response. The role supervises the Security team and provides technical direction and support to Network, Systems, and Service Desk teams. It owns data security practices and helps leadership make informed risk and investment decisions while balancing protection, operational reliability, staff capabilities, and cost. The position leads cybersecurity planning, risk assessment, framework implementation, security control design and operation, vulnerability management, data classification, managed detection and response relationships, incident preparedness and response, and security awareness. It provides security guidance for projects and system changes, maintains security platforms and documentation, and occasionally responds to critical alerts outside business hours as assigned. The role supervises a Security Administrator and requires a High Security Gaming License clearance and a minimum age of 21.

Requirements

Bachelor’s degree in information technology or a related field and at least three years of directly applicable experience; or an associate degree in information technology or a related field and four years of IT experience; or five years of directly applicable experience.
At least three years of progressively responsible experience in cybersecurity, network security, incident response, or closely related work with substantial security responsibilities.
At least one year of direct staff supervision, including assigning work, coaching employees, and evaluating performance.
Hands-on experience implementing and troubleshooting security controls in a production environment, including access control, secure configuration, segmentation, logging, vulnerability remediation, and recovery while considering availability and operational impact in a 24/7 organization.
Ability to plan and deliver technical work across teams, define outcomes, estimate effort, manage dependencies, communicate progress and blockers, maintain usable documentation, and verify completion.
Ability to assess security risks, prioritize improvements, and explain options and impacts to technical and nontechnical audiences.
Clear communication, coaching, and relationship-building skills with employees, managers, and service providers; ability to explain security expectations, resolve competing priorities constructively, and support teams without taking over their operational responsibilities.
Ability to investigate unfamiliar technical problems using logs, network traffic, system behavior, documentation, and structured reasoning; understand common network and identity dependencies and know when to involve teammates, vendors, or specialists.
Demonstrated ongoing technical learning and sound judgment when evaluating unfamiliar technologies and emerging threats, including distinguishing meaningful risks from noise.
Demonstrable experience contributing to security monitoring, incident response, or incident preparedness, turning findings into corrective actions and investigating with internal teams and service providers.
Demonstrable understanding of identifying and protecting sensitive data through classification, access controls, appropriate sharing, and retention practices, and translating principles into workable plans with business and technical owners.
High Security Gaming License clearance required.
Must be at least 21 years of age.

Nice To Haves

Bachelor’s degree in cybersecurity, information technology, or a related field; candidates without a degree may qualify through relevant experience and demonstrated capabilities.
Experience securing operational technology, business-critical infrastructure, or environments that operate around the clock.
Experience applying a cybersecurity framework, developing incident response plans, leading exercises, or evaluating control effectiveness.
Experience securing Microsoft 365, Entra ID, Active Directory, Windows Server, or comparable enterprise platforms.
Experience with endpoint detection and response, centralized security logging, managed detection and response providers, or data protection tools.
Experience using PowerShell, Python, or other scripting tools to automate security work, improve telemetry, or reduce manual effort.
Relevant security or networking certifications, or comparable evidence of applied learning such as security research, lab work, or technical projects.

Responsibilities

Develop and maintain a risk-based cybersecurity roadmap aligned with business needs, threat exposure, control gaps, staffing, budget, culture, and 24/7 operational needs.
Lead, mentor, and supervise the Security team, including setting expectations, assigning work, providing training, and reviewing performance; ensure team readiness, work quality, and follow-through.
Lead implementation of an established cybersecurity framework, define a practical security baseline, assign control owners, maintain evidence, and test control effectiveness.
Assess cyber risks to business services and data, including third-party dependencies; estimate operational and financial impacts, maintain a prioritized risk register, track remediation, and bring risk acceptance decisions to the IT Director.
Report security posture, unresolved risks, control effectiveness, and improvement progress to leadership; evaluate proposed investments based on cost, operational impact, and expected risk reduction.
Design, implement, and validate security controls across identity, endpoints, networks, applications, and cloud services, including least privilege, multifactor authentication, secure remote access, segmentation, network access controls, system hardening, and sensitive-data protection.
Provide security design reviews and technical guidance for projects, expansion, and system changes; coordinate requirements, implementation, testing, and operational responsibilities with technical teams, vendors, and business stakeholders.
Manage operational relationships with managed detection and response providers, including monitoring coverage, alert investigation, detection tuning, escalation paths, and provider performance reviews.
Operate and maintain security platforms, including configuration, upgrades, monitoring, troubleshooting, and configuration backups; address logging or coverage gaps and verify tool reliability and effectiveness.
Own vulnerability management, coordinating assessment, prioritization, and remediation; document owners, target dates, exceptions, and verification of corrective actions.
Own the data security and classification program, defining sensitive-information handling, access, retention, and sharing requirements with business owners and implementing practical protections.
Evaluate emerging threats, including AI-assisted attacks, and risks from organizational AI use; develop guidance and safeguards for sensitive data, access, and verification of high-risk requests.
Maintain an incident response plan, reusable technical procedures, and scenario-specific playbooks; lead tabletop exercises and coordinated technical tests, clarify responsibilities, and track lessons learned through corrective actions.
Lead technical response to suspected or confirmed incidents, coordinating investigation, containment, evidence preservation, recovery, and communications; occasionally triage, escalate, and respond to critical alerts outside business hours as assigned.
Build security awareness and practical skills through coaching, targeted training, and clear guidance; encourage prompt reporting of suspicious activity or mistakes.
Maintain centrally accessible documentation for security architecture, configurations, standards, procedures, response actions, and support handoffs.
Follow established policies, procedures, and applicable requirements, and perform other related duties as assigned.
Promote WRC quality service standards: Safety, Integrity, Courtesy, Team, and Show.