Security Engineer III

The Security Engineer III provides advanced technical expertise in the design, implementation, and operation of enterprise security capabilities across endpoint, cloud, network, application, identity, and data environments. The role is responsible for strengthening preventative and detective controls through security engineering, detection engineering, vulnerability management, and incident response. This position also evaluates emerging technologies and threats to continuously improve the organization’s security posture., * Engineer, implement, maintain, and continuously improve enterprise security controls across endpoint, cloud, network, application, identity, web, API, and data security environments.

• Serve as a technical subject matter expert for assigned security capabilities, providing guidance on secure architecture, configuration, integration, and operational best practices.
• Identify, assess, and drive remediation of vulnerabilities, security exposures, and control gaps identified through security assessments, penetration testing, monitoring, audits, and vulnerability management programs.
• Design and implement security controls for cloud infrastructure, workloads, applications, and services, including identity, network security, workload protection, vulnerability management, and secure configuration.
• Partner with application and engineering teams to integrate security throughout the software development lifecycle, including application and API security testing, secure design, vulnerability remediation, and DevSecOps practices.
• Engineer and maintain network, web applications, and secure access controls, including segmentation, traffic inspection, threat prevention, secure web access, and protection of Internet-facing applications and services.
• Evaluate and improve identity and access security, including authentication, authorization, privileged access, service identities, least privilege, and Zero Trust principles.
• Develop and improve security monitoring and detection capabilities, including SIEM use cases, detection logic, telemetry requirements, alert tuning, threat hunting, and identification of suspicious or malicious activity.
• Provide technical expertise during security incidents, including investigation, containment, root-cause analysis, remediation, and identification of opportunities to improve preventative and detective security controls.
• Research emerging threats and technologies, including artificial intelligence and generative AI security risks; develop security architecture, standards, and documentation; and identify opportunities to improve security through automation, APIs, scripting, and orchestration.

• 5+ years of relevant experience in information security, security engineering, infrastructure security, or related technology disciplines, with demonstrated experience implementing and supporting enterprise security controls.
• Strong experience with endpoint security and threat protection, including endpoint detection and response, attack prevention, security monitoring, threat investigation, and vulnerability management.
• Strong understanding of cloud security architecture and engineering, including workload security, identity, networking, configuration and posture management, vulnerability management, and cloud-native environments.
• Experience with application and API security, including secure software development practices, application security testing, API authentication and authorization, vulnerability identification, and integration of security into development pipelines.
• Strong knowledge of network, web application, and secure access security, including firewalls, segmentation, web application protection, secure web gateways, proxies, traffic inspection, intrusion prevention, and Zero Trust concepts.
• Experience with identity and access management, including authentication, authorization, privileged access, role-based access controls, service identities, least privilege, and modern identity security concepts.
• Experience with SIEM and detection engineering, including log and telemetry analysis, development and tuning of detection logic, correlation of security events, threat hunting, and investigation of anomalous or malicious activity.
• Experience supporting security incident response, including investigation, triage, containment, root-cause analysis, remediation, and translating lessons learned into improved preventative and detective controls.
• Ability to assess complex technical architectures, identify security risks and control gaps, and develop practical engineering solutions across cloud, endpoint, application, network, identity, API, and AI-enabled environments.
• Strong analytical, troubleshooting, collaboration, and communication skills, with experience in security automation, scripting, or APIs and knowledge of NIST-based security frameworks, risk management, and compliance requirements.

Credit One Bank, N.A. is a data-driven financial services company based in Las Vegas. Founded in 1984, Credit One Bank offers a spectrum of credit card products for people in all stages of financial life. Credit One Bank is an equal opportunity employer committed to diversity and inclusion and does not discriminate against any employee or applicant for employment because of age, race, religion, color, disability, sex, sexual orientation, or national origin. Reasonable accommodations can be made for those who require them, including access to job applications and workplace accommodations. Employment at Credit One Bank is based on mutual consent (also known as at-will). This means that employees and the Bank may terminate the employment relationship at any time, with or without cause and with or without notice. Please contact the recruiter for this position to learn more. Credit One Bank does not accept unsolicited resumes from agencies and is not responsible for related fees.