Security Engineer

American AgCredit

9d • $96,484 - $164,023 • Remote

About The Position

The Security Engineer is responsible for the operation, administration, optimization, and support of the Association's information security platforms and services. As a member of the Security Operations team, this role performs hands-on security engineering and operations activities designed to identify, investigate, respond to, and remediate cybersecurity threats, vulnerabilities, and exposures.

This position has a primary focus on Vulnerability Management and is responsible for vulnerability assessment, exposure discovery, technical validation, risk-based prioritization, remediation coordination, and issue tracking through resolution. The Security Engineer works closely with infrastructure, application, cloud, endpoint, and other technology teams to ensure vulnerabilities and exposures are identified, understood, and addressed in accordance with established remediation timelines.

In addition to vulnerability management, this role supports security monitoring, incident response, threat hunting, cloud and endpoint security, detection tuning, and security automation. The Security Engineer investigates security events, evaluates control gaps, improves technical controls, and maintains the platforms, integrations, automation, reporting, and processes necessary to protect Association systems and data.

Strong collaboration and communication skills are essential. This role works with technology teams, managed security service providers, vendors, and internal stakeholders to investigate security concerns, provide practical remediation guidance, reduce risk, and improve security operations.

Requirements

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; or an equivalent combination of education, technical training, certifications, military service, and professional experience that demonstrates the knowledge and skills required to perform the responsibilities of the position.
• Minimum of 5 years of hands-on experience supporting, administering, troubleshooting, engineering, or securing enterprise technology environments. Experience may be gained through information technology, infrastructure administration, systems administration, cloud administration, endpoint administration, network administration, cybersecurity, security operations, security engineering, or related technical disciplines.
• Strong technical aptitude with experience supporting enterprise technology environments, investigating complex technical issues, working across technology teams, and driving solutions through resolution. Demonstrates analytical thinking, continuous learning, and an interest in cybersecurity and risk reduction.
• Must have the ability to perform basic office tasks and sit at a desk for an extended period of time.
• Job requires extensive use of computers and phones.
• While performing the job, the employee is required to sit, crouch, kneel, crawl, reach and have the ability to lift up to 40 pounds.
• Ability to work with typical hardware and cabling practices required.
• Must have strong written and verbal communication skills to adequately convey ideas and work well with a team.
• Ability to talk and hear, sit and use their hands and fingers, and reach in all directions is essential in performance of the job.
• Must be able to interact effectively with people at all levels of company.
• Work during established business hours and may require occasional weekend and/or evening work.

Nice To Haves

• Experience with vulnerability management, security operations, infrastructure operations, cloud administration, endpoint management, systems administration, network administration, or security engineering is preferred, along with familiarity with vulnerability management principles, secure configuration practices, security frameworks, and risk-based prioritization methodologies.
• Experience with enterprise technology, security platforms, scripting, automation, reporting, or workflow improvement is preferred.
• Familiarity with industry security frameworks and standards, including NIST Cybersecurity Framework, CIS Controls and Benchhmarks
• Relevant technical or security certifications are preferred.
• The ideal candidate has a strong hands-on technology foundation, a passion for cybersecurity, and experience solving complex problems in enterprise environments. Candidates may come from infrastructure, systems administration, cloud, endpoint, network, security operations, security engineering, or other technical backgrounds.
• The successful candidate is naturally curious, communicates effectively, and works well across technology teams to understand issues, identify root causes, and drive practical solutions through resolution. Direct experience with vulnerability management or security operations is valuable, but technical aptitude, sound judgment, continuous learning, and the ability to translate findings into actionable remediation guidance are equally important.

Responsibilities

• Administer, optimize, and support enterprise security platforms used for vulnerability management, threat detection, endpoint security, cloud security, identity protection, email security, and related security operations.
• Perform and coordinate vulnerability management activities across endpoint, server, application, cloud, network, and internet-facing environments. Identify, validate, prioritize, and drive remediation of vulnerabilities and exposures using risk-based methodologies that consider exploitability, business impact, asset criticality, threat intelligence, and remediation objectives.
• Assess system configurations, security controls, and technology implementations to identify security weaknesses, potential attack paths, and control gaps. Provide technical guidance and remediation recommendations to support secure deployment and operation of Association technologies.
• Monitor security telemetry, threat intelligence, vulnerability disclosures, and attack activity to identify emerging threats. Conduct threat hunting activities and improve detection capabilities to increase security visibility and reduce organizational risk.
• Investigate and respond to cybersecurity incidents, suspicious activity, and security events. Collaborate with technology teams, managed security service providers, and technology vendors to contain threats, resolve issues, and improve defensive capabilities.
• Develop, evaluate, and enhance security tools, automation, integrations, reporting, dashboards, controls, and operational workflows to improve efficiency, increase visibility, reduce manual effort, and support data-driven security operations.
• Develop and maintain operational documentation, procedures, technical runbooks, and knowledge articles that support consistent execution of security operations and vulnerability management activities.
• Evaluate and recommend improvements to security tools, processes, controls, and operational practices.
• Participate in after-hours security incident response activities when necessary.
• Perform other duties as assigned.

Benefits

• Commitment to agriculture and the communities we serve
• Family friendly work environment
• Investment in employee development
• Medical, Dental and Vision coverage
• Outstanding 401k – automatic 3% employer contribution, plus match up to 6%
• Generous Paid Time Off (Vacation accrued at 21 days annually, Sick Days accrued at 15 days annually, 12 paid holidays, plus 16 hours of volunteer time)
• Competitive Incentive Compensation Plan
• Disability & Life Insurance
• Employee mental, physical, and financial wellness programs

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level