Information Security Engineer

The Information Security Engineer will play a critical role in evolving and maturing the organization’s information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes policies, standards, guidelines, and controls to manage and prevent risks to Orange County’s Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks., * Coordinate and perform risk and vulnerability assessments of the Credit Union’s systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.

• In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization’s data, systems and services on premises and in public cloud.
• Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.
• Perform daily operations and monitor events from multiple sources including, but not limited to, SIEM consoles, network and host-based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools.
• Promptly respond to all security incidents; conduct and support breach analysis in collaboration with internal partners and external parties; and provide thorough post-event analysis, documentation and recommendations.
• Provide subject matter expertise on information security in areas such as vendor risk management, application development, database design, network, platform/operating system, and cloud-based services.
• Other duties as assigned.

• Bachelor’s Degree in Computer Science, Information Security, Information Assurance or related technology field.
• 5+ years of experience in information / cyber security and IT risk management (including hands-on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
• 2+ years of hands-on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
• Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security - Specialty, Azure Security Engineer Associate.

Pulled from the full job description Referral program Health insurance 401(k) matching Dental insurance Life insurance Paid holidays, The targeted annual salary range is $95,000.00 to $119,000.00. Final offer will be determined based on experience, education, training/certifications and specialized skills.

Perks & Benefits:

• Health Coverage: Comprehensive benefits, including Anthem, Delta Dental, and VSP, effective from your first day.
• Financial Security: Life insurance at no cost and a 401(k) plan with an employer match up to 6%.
• Work-Life Balance: 13 days of vacation and seven (7) sick days annually and paid holidays.
• Recognition & Growth: Annual merit increases, discretionary and referral bonuses, as well as educational grants up to $1,000 per year.

This position is currently hybrid-eligible, with the expectation of three days pre-assigned on-site attendance. This role requires California residency and living within a 50-mile commute of our headquarters in Santa Ana.

Be part of a mission-driven organization where your expertise directly shapes security strategy and protects our members. You’ll lead meaningful initiatives, collaborate with talented teams, and help advance a modern, resilient security program.

At Orange County’s Federal Credit Union, we don’t just offer banking services, we create meaningful relationships that empower our members and enrich our community. With over 85 years of trust, $3+ billion in assets, and 140,000+ members, we’ve built a reputation for excellence-and we’re just getting started.

Our commitment to people, performance, and purpose has earned us the #1 spot in the Orange County Register’s 2024 Best Credit Union list, and the voices of our employees have earned us the Peter Barron Stark Award for Workplace Satisfaction. When you join us, you’re not just taking the next step in your career; you’re joining a team that loves where they work.