Security Engineer II

The Security Engineer II is responsible for the implementation, maintenance, and operational support of information security technologies that protect the Credit Union’s systems, networks, and information assets. This role works closely with Information Security leadership and IT teams to identify security risks, implement technical controls, and support compliance with regulatory and industry standards. The Security Engineer II applies a proactive, detail oriented approach to securing enterprise, cloud, and SaaS environments., * Design, implement, configure, and maintain information security tools, technologies, and controls to protect corporate systems and data.

• Assist with implementing and maintaining information security architecture, standards, and best practices.
• Support the development and maintenance of system security requirements, baselines, and hardening standards for infrastructure, applications, cloud, and SaaS platforms.
• Monitor security tools and alerts, investigate potential threats, and assist with timely incident response and remediation.
• Perform security assessments, vulnerability scans, and system audits to ensure compliance with information security policies, procedures, and standards.
• Assist with preparation, testing, and documentation of incident response plans.
• Support security investigations by collecting evidence, documenting findings, and assisting with root cause analysis.
• Assist with aligning security controls to applicable frameworks such as PCI DSS, NIST 800 53, ISO 27001, CIS, MITRE ATT&CK, and OWASP Top 10.
• Implement and maintain security appliances and platforms including endpoint protection, firewalls, IDS/IPS, MDM, proxies, SIEM, and vulnerability management tools.
• Collaborate with IT teams to ensure secure configuration, deployment, and operation of hardware, software, and network infrastructure.
• Assist with vendor security reviews and due diligence activities as needed.
• Maintain system and security design documentation and operational procedures.
• Provide security related guidance and support to IT staff and business partners.
• Participate in regulatory exams, audits, and internal reviews by providing documentation and technical support.
• Stay current on emerging threats, vulnerabilities, and security technologies relevant to the financial services industry.
• Travel to branch locations as needed to support security initiatives.
• Preserve the confidentiality of Credit Union data and records.
• Perform other duties as assigned., This description has been reviewed to ensure that only essential functions and basic duties have been included. Peripheral tasks, only incidentally related to each position, have been excluded. Essential functions, requirements, skills, and abilities included have been determined to be the minimal standards required to successfully perform the positions. In no instance, however, should the duties, responsibilities, and requirements delineated be interpreted as all inclusive. Additional functions and requirements may be assigned by supervisors as deemed appropriate.

In accordance with the Americans with Disabilities Act, it is possible that requirements may be modified to reasonably accommodate disabled individuals. However, no accommodations will be made which may pose serious health or safety risks to the employee or others or which impose undue hardships on the organization.

The Credit Union believes that each employee makes a significant contribution to our success. That contribution should not be limited by the assigned responsibilities. Therefore, this job description is designed to outline primary duties, qualifications, and job scope, but not limit the incumbent. It is our expectation that each employee will offer his/her services wherever and whenever necessary to ensure the success of our endeavors.

Job descriptions are not intended as and do not create employment contracts. The organization maintains its status as an at will employer. Employees can be terminated for any reason not prohibited by law.

Final Compensation for this position will be determined by various factors such as relevant work experience, specific skills and competencies, education, certifications, and internal pay equity.

We anticipate this position to close within 30 days of posting. Please submit your application at your earliest convenience to be considered.

Do you have experience in Windows?, Do you have a Bachelor’s degree?, Education/Certification:

• Bachelor’s degree in Computer Science, Information Technology, Cybersecurity, or a related field, or equivalent experience.
• Security certifications such as GSEC, SSCP, Security+, or similar preferred or willingness to obtain.

REQUIRED KNOWLEDGE

• Working knowledge of information security frameworks and standards such as PCI DSS, NIST 800 53, ISO 27001, CIS, MITRE ATT&CK, and OWASP Top 10.
• Proficiency with Microsoft Windows desktop and server environments.
• Basic knowledge of Linux operating systems.
• Understanding of networking concepts, protocols, and security principles.
• Familiarity with virtualization technologies and SAN environments.
• General understanding of cloud and SaaS security concepts., * 3 to 5 years of experience in information security, cybersecurity, or IT infrastructure roles with a security focus.
• Hands on experience with security technologies such as endpoint protection, firewalls, IDS/IPS, SIEM, vulnerability scanners, and MDM solutions.
• Experience supporting or implementing security controls in a regulated environment (financial services preferred).

HARD / TECHNICAL SKILLS & ABILITIES

• Regulatory Knowledge/Skills: Experience working with regulatory and compliance requirements such as PCI, GLBA, NCUA, SOX, or similar.
• Technical Skills: Experience with technologies such as VMware vCenter, Cisco networking and security products, and Citrix environments preferred. Working knowledge of Azure, Entra ID, and security monitoring or auditing tools.
• Analytical Skills: Strong analytical, troubleshooting, and problem solving skills.
• Documentation Skills: Ability to clearly document technical procedures and security findings.
• Communication Skills: Strong communication and collaboration skills.
• Service Orientation: Customer service mindset with a willingness to assist others.

WORKING CONDITIONS

• Standard office conditions
• Low to moderate noise
• Limited lifting up to 30 lbs.

Pulled from the full job description

• Tuition reimbursement
• 401(k)
• Health insurance
• Paid time off
• Vision insurance
• Dental insurance
• Employee assistance program

Full job description

We recognize that in order to meet the needs of our communities, we must represent our communities. Our success relies on creating a culture where we have diverse perspectives and a true sense of belonging. This is a journey, and we pledge to do more than simply check the box.

When you join the Meritrust team, your benefits will include:

• Comprehensive medical insurance plan
• Dental and vision insurance
• Generous paid-time-off
• 12 paid holidays
• Annual bonus (discretionary bonus based on achievement of organizational scorecard results)
• 401(k) plan
• Wellness program
• Tuition assistance
• Employee loan discount
• Employee Assistance Program (EAP)
• Life and disability coverage

What sets working for Meritrust apart?

• Career development and pathing opportunities to move into leadership roles or other lines of business within MCU such as Commercial Lending, Finance, Marketing, Underwriting, Member Solutions, Training, Human Resources, and more.
• Supportive and engaging work environment.
• A wellness and sustainable work culture that puts family, Mother Nature, our community, and your health first.
• A work environment that encourages personal as much as professional growth, teamwork to make the dream work, and treating everyone equally.
• Studies have shown that individuals from marginalized and or historically underrepresented groups may be less likely to apply for jobs unless they meet every one of the qualifications listed. We are most interested in finding the best candidate for the job. We would encourage you to apply for a job at Meritrust Credit Union, even if you don’t meet every one of our qualifications listed.

This is a full-time position working 40 hours a week, Monday-Friday 8:00am - 5:00pm.