Security Engineer

Georgia's Own Credit Union

87d•Hybrid

About The Position

If you would enjoy working in a dynamic environment and are looking for an opportunity to become part of a stellar team of professionals dedicated to service, we invite you to apply online today. This position offers a flexible hybrid work arrangement, allowing employees to balance in-office collaboration with the benefits of remote work. We provide the necessary tools and technology to ensure seamless productivity, whether you're working from home or the office. SUMMARY: Implements, configures, monitors, and manages the internal cyber environment to ensure operational availability and security. Accountable for the day-to-day health and performance of cyber security tools and products. Accountable for all stages in asset management lifecycle of cyber security infrastructure, software or devices. Accountable for creating and maintaining comprehensive documentation such as network diagrams and data flow diagrams. Accountable for maintaining secure and stable release levels with strong written change control documentation and communication. Collaborate with staff and vendors on changes or day-to-day support. Response and resolution to all cyber security related incidents. Ensures all requests or issues are resolved within defined service level requirements or report aged items to management for escalation. Ensures the enterprise is secure and maintained with up-to-date information, only altered through applicable change control processes, and ensures effective experiences are delivered through technology. Serves as escalation for complex changes and issue resolution. Assist with Enterprise Technology and Credit Union wide projects. Builds strong and productive relationships with all staff, ensuring that Enterprise Technology is positioned as a business enabler and trusted partner. In-person and on-call work will fluctuate with demand. At times, work that does not require in-person presence may be done remotely. The ability to handle a wide range of technical tasks is required.

Requirements

Minimum 10 years’ experience in technical field with majority focused on cyber security.
Minimum 5 years’ experience building and administering cyber security products and controls required.
Minimum 5 years’ experience analyzing and responding to security events preferred.
Bachelor’s degree in related technical field or equivalent information security certifications.
Knowledge and experience working with Linux/Unix environment is a plus.
Expert understanding of DLP technologies, VPN technologies, and next generation Firewall technologies.
Expert understanding of Microsoft Windows server and cloud technologies.
Expert understanding working with virtualization technologies like VMWare, Citrix, etc.
Experience with enterprise systems architectures and components like EntraID, AD, DHCP, DNS, etc.
Experience with AI-driven cybersecurity initiatives.
Working knowledge of AI Systems – Agentic, Generative and LLMs, etc.
Knowledge of Automation Scripting tools like – Python, PowerShell, JavaScript, Bash etc.
Knowledge of network design, IP management techniques, routing protocols (ASEoD, BGP and OSPF) encryption, and monitoring tools.
Comfortable working in cloud platforms like Amazon AWS, Google Cloud and Microsoft 365.
Works cohesively with teammates locally and in remote offices; shares knowledge and is seen as someone to go to for help; contributes in peer meetings. Help foster a work environment of trust, and openness.
Ability to problem solve issues by taking ownership, understanding need for temporary fixes, with ability to implement permanent solutions.
Strong verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback.
Ability to use good judgment when adhering to department and end user and/or member confidentiality.
Generate new ideas, challenge the status quo, support change and use creativity to solve problems through a commitment to the use of innovative and modern approaches to work.
Be proactive while remaining flexible and adaptive to the evolving needs of all Credit Union staff.

Nice To Haves

Financial industry experience highly preferred.

Responsibilities

Assistance with the implementation, support, and transition of strategic business initiatives and ensure that the credit union chosen technologies are secured and operating as efficiently as possible during and after implementation
Facilitate collaboration between business units and technologies
Facilitate continuous improvement strategies through the use of existing and new technologies
Collaborate to ensure on-time delivery of all projects, regardless of project leadership
Report on aged projects, or projects in danger of missing targeted delivery dates
Issue logging for all service requests, changes or issues
Follow procedures for defined Ticket flow, response, escalation to maintain SLA’s for the credit union’s enterprise technologies
Continual review of checklist and tools, tickets, etc to ensure continued health of environment
Issue resolution and preventative actions for all cyber tools and products
Assist credit union personnel with general use of security solutions as applicable
Provide solution delivery education to team members
Maintain latest releases for all infrastructure
Change control creation, presentation, implementation and transition to ongoing operations
Infrastructure Asset Lifecycle Management – asset inventory, receiving, imaging, deployment, cleaning, moving, maintain spares, decommission, destruction and disposal
Documentation of all security infrastructure technologies and technology processes
Daily review of monitoring tools for anomalies that require attention for resolution
Vulnerability mitigation and incident response
Environment hardening and vulnerability remediation
Escalation/Awareness of unresolved issues/request in danger of missing OLAs/SLAs
Reporting any issues to department management in a timely manner
Follow Change Control process at all times
Follow Incident Response process at all times
Follow technology purchasing and asset management processes at all times
Adhere and uphold the ISS&P at all times
Follow Access Management processes at all times, honoring separation of duties
Assist as needed to maintain Vulnerability Management and Patching standards
Comply with policies and procedures and understand changes in requirements; maintain a thorough knowledge of policies and procedures and trends in the credit union. Assist in educating staff whenever possible of information security standards and practices
Management of security layers including, but not limited to: Patch Management, Vulnerability Scanning, Firewall, IPS/IDS, NAC and Rogue Device Detection, Endpoint Protection (AV, EDR, Zero-Day, APT, Anti-Ransomware), SIEM (logging, event correlation), DMARC/SPF, DLP/CASB, Anti-Phishing/Smishing/Vishing, MFA and Password Vaulting, Browser Isolation & UTM, Dark Web and Brand Monitoring, DDoS, MDM, DNS, Certificate Management, Cloud Security, Data Governance
Ensure all security infrastructure is monitored at all times, with appropriate alert notifications and escalations in place to align with business continuity goals.