> Markdown version of [/jobs/ext/1154819-senior-information-security-engineer](https://www.wearedevelopers.com/jobs/ext/1154819-senior-information-security-engineer). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Senior Information Security Engineer - **Company:** Orange County's Federal Credit Union - **Location:** Santa Ana, CA, United States - **Experience:** Expert - **Salary:** $108,895.0 - $136,000.0 - **Contract:** Permanent contract - **Skills:** Amazon Web Services, Microsoft Azure, Cloud Computing Security, Cyber Security, Databases, Data Security, Networking Hardware, Information Systems Security Architecture Professional, Network Security, Citrix XenApp, PCI Data Security Standards, Zero Trust Network Access, Secure Coding, Security Information and Event Management, Virtualization Technology, Software Vulnerability Management, Network Routers, Enterprise Software Applications, Load Balancing, Cloud Platform System, Software Security, Firewalls (Computer Science), Containerization, Kubernetes, Information Technology, Purple Team (Cyber Security), Network Server, Devsecops, Docker, Security Orchestration, Automation & Response, Static Application Security Testing, Vulnerability Analysis, Vmware, Dynamic Application Security Testing - **Published:** July 2, 2026 - **Apply:** https://www.indeed.com/viewjob?jk=e56dbc422727ca16 ## About the Role * Bachelor's Degree in Computer Science, Information Security, Information Assurance, or related technology field. * 7+ years of hands-on experience in enterprise information / cyber security and IT risk management. * 3+ years of deep expertise in AWS and Azure security, cloud-native tools, and modern security architectures. * Strong background in threat modeling, network security, vulnerability management, automation, and secure engineering practices. * Experience with industry frameworks such as NIST, CIS, PCI DSS, FFIEC. * Proven experience with regulations, policies, standards and framework pertaining to information and cyber security including PCI DSS standards, FFIEC guidelines on cybersecurity, CIS / NIST framework. * Proven experience with secure coding standards and best practices; SAST/DAST/IAST tooling; API security; and integration of security controls into CI/CD pipelines (DevSecOps). * Proven experience with virtualization and container technologies, such as VMware, Citrix Xen, Docker, or Kubernetes. * At least one relevant certification (CISSP, GIAC, Security+, AWS Security - Specialty, Azure Security Engineer, etc.). * Ability to influence, partner cross-functionally, and operate under urgency with sound judgment. This position is currently hybrid-eligible, with the expectation of three days pre-assigned on-site attendance. This role requires California residency and living within a 50-mile commute of our headquarters in Santa Ana. ## Description * Lead complex risk, vulnerability, and purple-team assessments to identify, validate, and remediate threats. * Architect secure network, application, data, and cloud environments-covering AWS, Azure, DevSecOps pipelines, and enterprise platforms. * Drive implementation of security tooling, automation frameworks, EDR/XDR, SIEM, SOAR, and secure configuration baselines. * Partner with Engineering, Infrastructure, and external vendors to design and validate secure solutions. * Serve on the Cybersecurity Incident Response Team, leading investigations and post-incident improvements. * Create and maintain security policies, training, and best practices, mentoring teams on zero-trust and security-by-design principles. * Designs, develops, and documents: (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services. * Provide expert guidance in areas such as vendor risk, cloud security, secure coding, and application security. * Conducts and leads purple team risk and vulnerability assessments against systems and processes to ensure appropriate controls are in place, and recommends and implements controls to remediate risk findings. ## Related Videos - [Kubernetes and Microservices with Multi-Model Databases](https://www.wearedevelopers.com/videos/382-kubernetes-and-microservices-with-multi-model-databases) - [Docker Compose: Rediscovered](https://www.wearedevelopers.com/videos/1978-docker-compose-rediscovered) - [WebAssembly: The Next Frontier of Cloud Computing](https://www.wearedevelopers.com/videos/972-webassembly-the-next-frontier-of-cloud-computing) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Fault Tolerance and Consistency at Scale: Harnessing the Power of Distributed SQL Databases](https://www.wearedevelopers.com/videos/1146-fault-tolerance-and-consistency-at-scale-harnessing-the-power-of-distributed-sql-databases) - [Docker build without Docker](https://www.wearedevelopers.com/videos/100114-docker-build-without-docker) ## Related Articles - [Best Paying Jobs in Technology](https://www.wearedevelopers.com/magazine/256-best-paying-jobs-in-technology) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed) - [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers) - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Walking Into The Era of Supply Chain Risks](https://www.wearedevelopers.com/magazine/106-walking-into-the-era-of-supply-chain-risks)