Security Engineer

Remote Hiring Remotely in USA Expert/Leader Remote Hiring Remotely in USA Expert/Leader Implement, configure, monitor, and manage cybersecurity tools and infrastructure, handle incident response and vulnerability mitigation, maintain asset lifecycle and documentation, ensure change control and SLA compliance, support projects and provide escalation for complex security issues. The summary above was generated by AI, Implements, configures, monitors, and manages the internal cyber environment to ensure operational availability and security. Accountable for the day-to-day health and performance of cyber security tools and products. Accountable for all stages in asset management lifecycle of cyber security infrastructure, software or devices. Accountable for creating and maintaining comprehensive documentation such as network diagrams and data flow diagrams. Accountable for maintaining secure and stable release levels with strong written change control documentation and communication. Collaborate with staff and vendors on changes or day-to-day support. Response and resolution to all cyber security related incidents. Ensures all requests or issues are resolved within defined service level requirements or report aged items to management for escalation. Ensures the enterprise is secure and maintained with up-to-date information, only altered through applicable change control processes, and ensures effective experiences are delivered through technology. Serves as escalation for complex changes and issue resolution. Assist with Enterprise Technology and Credit Union wide projects. Builds strong and productive relationships with all staff, ensuring that Enterprise Technology is positioned as a business enabler and trusted partner. In-person and on-call work will fluctuate with demand. At times, work that does not require in-person presence may be done remotely. The ability to handle a wide range of technical tasks is required., The essential duties and responsibilities of this position include the following. Other duties may be assigned. (Remote Capable Yes/No/Partial)

Solutions Development - (Partial)

• As requested, assistance with the implementation, support, and transition of strategic business initiatives and ensure that the credit union chosen technologies are secured and operating as efficiently as possible during and after implementation
• Facilitate collaboration between business units and technologies
• Facilitate continuous improvement strategies through the use of existing and new technologies
• Collaborate to ensure on-time delivery of all projects, regardless of project leadership
• Report on aged projects, or projects in danger of missing targeted delivery dates

Solutions Delivery - (Partial)

• Issue logging for all service requests, changes or issues
• Follow procedures for defined Ticket flow, response, escalation to maintain SLA’s for the credit union’s enterprise technologies
• Continual review of checklist and tools, tickets, etc to ensure continued health of environment
• Issue resolution and preventative actions for all cyber tools and products
• Assist credit union personnel with general use of security solutions as applicable
• Provide solution delivery education to team members
• Maintain latest releases for all infrastructure
• Change control creation, presentation, implementation and transition to ongoing operations
• Infrastructure Asset Lifecycle Management - asset inventory, receiving, imaging, deployment, cleaning, moving, maintain spares, decommission, destruction and disposal
• Documentation of all security infrastructure technologies and technology processes
• Daily review of monitoring tools for anomalies that require attention for resolution
• Vulnerability mitigation and incident response

Solutions Management - (Partial)

• Environment hardening and vulnerability remediation
• Escalation/Awareness of unresolved issues/request in danger of missing OLAs/SLAs
• Reporting any issues to department management in a timely manner
• Follow Change Control process at all times
• Follow Incident Response process at all times
• Follow technology purchasing and asset management processes at all times
• Adhere and uphold the ISS&P at all times
• Follow Access Management processes at all times, honoring separation of duties
• Assist as needed to maintain Vulnerability Management and Patching standards
• Comply with policies and procedures and understand changes in requirements; maintain a thorough knowledge of policies and procedures and trends in the credit union. Assist in educating staff whenever possible of information security standards and practices
• Management of security layers including, but not limited to:
• Patch Management
• Vulnerability Scanning
• Firewall
• IPS/IDS
• NAC and Rogue Device Detection
• Endpoint Protection (AV, EDR, Zero-Day, APT, Anti-Ransomware)
• SIEM (logging, event correlation)
• DMARC/SPF
• DLP/CASB
• Anti-Phishing/Smishing/Vishing
• MFA and Password Vaulting
• Browser Isolation & UTM
• Dark Web and Brand Monitoring
• DDoS
• MDM
• DNS
• Certificate Management
• Cloud Security
• Data Governance
• Ensure all security infrastructure is monitored at all times, with appropriate alert notifications and escalations in place to align with business continuity goals.
• 9:00am - 5:00pm M-F (remote, unless onsite or dispatch is needed)
• Remote Support after hours as needed
• 24/7 monitoring solutions with on call escalation as needed

ACCOUNTABILITIES AND PERFORMANCE MEASURES

• Innovation Program participation and support.
• Strategic Project success.
• Survey results.
• Team collaboration and support.
• Operational levels.
• Safety and Soundness.
• Vulnerability Management.
• Service Levels for issue or request related tickets., Mid level Mid level Financial Services Designs, configures, and supports Oracle HCM security across implementations and production environments. Responsibilities include role and access control, IAM, SOD analysis, vulnerability reduction, secure code development, security architecture, audit documentation, monitoring, and collaboration with technical and business stakeholders. The role also supports integrations, cloud environments, reporting, defect resolution, and agile security projects. Top Skills: Amazon Web Services (Aws)HTMLIdentity And Access Management (Iam)JavaScriptJIRAKafkaMicrosoft ProjectOracle HcmPl/SqlPythonRest ApisSaaSSQLXML Headway

Security Engineer

4 Days Ago In-Office or Remote 223K-279K Annually Senior level 223K-279K Annually Senior level Consumer Web * Healthtech * Professional Services * Social Impact * Software Build and mature Headway’s infrastructure security program across AWS and application platforms. Partner with Product and Infrastructure teams on secure system design, security reviews, platform guardrails, vulnerability remediation, and continuous infrastructure improvement. Support incident response and security operations while advancing AI-native cloud security practices. The role requires strong technical depth, cross-functional collaboration, and the ability to establish secure-by-default engineering practices in an ambiguous, fast-paced environment. Top Skills: Amazon EcsAmazon S3AnthropicAWSAws FargateCloudflareCursorDatadogFastapiGitKubernetesLangsmithPagerdutyPostgresPython 3ReactRedisSemgrepSqlalchemyTypescriptWiz Trail of Bits

• Minimum 10 years’ experience in technical field with majority focused on cyber security.
• Minimum 5 years’ experience building and administering cyber security products and controls required.
• Minimum 5 years’ experience analyzing and responding to security events preferred.
• Bachelor’s degree in related technical field or equivalent information security certifications.
• Knowledge and experience working with Linux/Unix environment is a plus.
• Expert understanding of DLP technologies, VPN technologies, and next generation Firewall technologies.
• Expert understanding of Microsoft Windows server and cloud technologies.
• Expert understanding working with virtualization technologies like VMWare, Citrix, etc.
• Experience with enterprise systems architectures and components like EntraID, AD, DHCP, DNS, etc.
• Experience with AI-driven cybersecurity initiatives.
• Working knowledge of AI Systems - Agentic, Generative and LLMs, etc.
• Knowledge of Automation Scripting tools like - Python, PowerShell, JavaScript, Bash etc.
• Knowledge of network design, IP management techniques, routing protocols (ASEoD, BGP and OSPF) encryption, and monitoring tools.
• Comfortable working in cloud platforms like Amazon AWS, Google Cloud and Microsoft 365.

ADDITIONAL/ IMPORTANT SKILLSETS

• Financial industry experience highly preferred.
• Works cohesively with teammates locally and in remote offices; shares knowledge and is seen as someone to go to for help; contributes in peer meetings. Help foster a work environment of trust, and openness.
• Ability to problem solve issues by taking ownership, understanding need for temporary fixes, with ability to implement permanent solutions.
• Strong verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback.
• Ability to use good judgment when adhering to department and end user and/or member confidentiality.
• Generate new ideas, challenge the status quo, support change and use creativity to solve problems through a commitment to the use of innovative and modern approaches to work.
• Be proactive while remaining flexible and adaptive to the evolving needs of all Credit Union staff.

PHYSICAL REQUIREMENTS:

To perform this job successfully, the employee must be able to perform each essential job duty satisfactorily. All employees must be able to communicate face to face or through technology with or without reasonable accommodation. Employee will be in an office environment (well-lighted, heated, and air-conditioned) typically stationed at a desk or table. Employee will be asked to sit and stand for various increments of time, and to lift/push up 10 lbs. Clerical office duties on various forms of technology are required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

All positions that have lending responsibilities must comply with all requirements under the SAFE ACT, as well as the Credit Union’s policies and procedures related to the SAFE ACT. This includes an obligation on the employee’s part to ensure that NMLA registration pertaining to the SAFE ACT is kept current. The employee must notify the Credit Union within 30 days of any changes that need to be reflected on the NMLS registry.

Remote United States 140K-180K Annually Junior 140K-180K Annually Junior Artificial Intelligence * Blockchain * Professional Services * Security * Consulting * Cybersecurity * Defense Conduct application security assessments, discover and validate vulnerabilities, analyze complex codebases, build custom security tooling, perform threat modeling and architecture reviews, and deliver actionable findings to clients. Independently own assessment workstreams, develop proof-of-concept exploits, communicate technical conclusions, review team work, and contribute to security research, open-source tools, and technical writing. Top Skills: AnsibleCC++GoHelmJavaScriptKubernetesPythonRustTerraformTypescript

What you need to know about the Colorado Tech Scene

With a business-friendly climate and research universities like CU Boulder and Colorado State, Colorado has made a name for itself as a startup ecosystem. The state boasts a skilled workforce and high quality of life thanks to its affordable housing, vibrant cultural scene and unparalleled opportunities for outdoor recreation. Colorado is also home to the National Renewable Energy Laboratory, helping cement its status as a hub for renewable energy innovation.

Key Facts About Colorado Tech

• Number of Tech Workers: 260,000; 8.5% of overall workforce (2024 CompTIA survey)
• Major Tech Employers: Lockheed Martin, Century Link, Comcast, BAE Systems, Level 3
• Key Industries: Software, artificial intelligence, aerospace, e-commerce, fintech, healthtech
• Funding Landscape: $4.9 billion in VC funding in 2024 (Pitchbook)
• Notable Investors: Access Venture Partners, Ridgeline Ventures, Techstars, Blackhorn Ventures
• Research Centers and Universities: Colorado School of Mines, University of Colorado Boulder, University of Denver, Colorado State University, Mesa Laboratory, Space Science Institute, National Center for Atmospheric Research, National Renewable Energy Laboratory, Gottlieb Institute