Security Engineer

If you would enjoy working in a dynamic environment and are looking for an opportunity to become part of a stellar team of professionals dedicated to service, we invite you to apply online today.

This position offers a flexible hybrid work arrangement, allowing employees to balance in-office collaboration with the benefits of remote work. We provide the necessary tools and technology to ensure seamless productivity, whether you're working from home or the office.

SUMMARY:
Implements, configures, monitors, and manages the internal cyber environment to ensure operational availability and security. Accountable for the day-to-day health and performance of cyber security tools and products. Accountable for all stages in asset management lifecycle of cyber security infrastructure, software or devices. Accountable for creating and maintaining comprehensive documentation such as network diagrams and data flow diagrams. Accountable for maintaining secure and stable release levels with strong written change control documentation and communication. Collaborate with staff and vendors on changes or day-to-day support. Response and resolution to all cyber security related incidents. Ensures all requests or issues are resolved within defined service level requirements or report aged items to management for escalation. Ensures the enterprise is secure and maintained with up-to-date information, only altered through applicable change control processes, and ensures effective experiences are delivered through technology. Serves as escalation for complex changes and issue resolution. Assist with Enterprise Technology and Credit Union wide projects. Builds strong and productive relationships with all staff, ensuring that Enterprise Technology is positioned as a business enabler and trusted partner. In-person and on-call work will fluctuate with demand. At times, work that does not require in-person presence may be done remotely. The ability to handle a wide range of technical tasks is required.

ESSENTIAL DUTIES AND RESPONSIBILITIES:

The essential duties and responsibilities of this position include the following.  Other duties may be assigned.   (Remote Capable Yes/No/Partial)

Solutions Development – (Partial)

• As requested, assistance with the implementation, support, and transition of strategic business initiatives and ensure that the credit union chosen technologies are secured and operating as efficiently as possible during and after implementation
• Facilitate collaboration between business units and technologies
• Facilitate continuous improvement strategies through the use of existing and new technologies
• Collaborate to ensure on-time delivery of all projects, regardless of project leadership
• Report on aged projects, or projects in danger of missing targeted delivery dates

Solutions Delivery – (Partial)

• Issue logging for all service requests, changes or issues
• Follow procedures for defined Ticket flow, response, escalation to maintain SLA’s for the credit union’s enterprise technologies
• Continual review of checklist and tools, tickets, etc to ensure continued health of environment
• Issue resolution and preventative actions for all cyber tools and products
• Assist credit union personnel with general use of security solutions as applicable
• Provide solution delivery education to team members
• Maintain latest releases for all infrastructure
• Change control creation, presentation, implementation and transition to ongoing operations
• Infrastructure Asset Lifecycle Management – asset inventory, receiving, imaging, deployment, cleaning, moving, maintain spares, decommission, destruction and disposal
• Documentation of all security infrastructure technologies and technology processes
• Daily review of monitoring tools for anomalies that require attention for resolution
• Vulnerability mitigation and incident response

Solutions Management – (Partial)

• Environment hardening and vulnerability remediation
• Escalation/Awareness of unresolved issues/request in danger of missing OLAs/SLAs
• Reporting any issues to department management in a timely manner
• Follow Change Control process at all times
• Follow Incident Response process at all times
• Follow technology purchasing and asset management processes at all times
• Adhere and uphold the ISS&P at all times
• Follow Access Management processes at all times, honoring separation of duties
• Assist as needed to maintain Vulnerability Management and Patching standards
• Comply with policies and procedures and understand changes in requirements; maintain a thorough knowledge of policies and procedures and trends in the credit union.  Assist in educating staff whenever possible of information security standards and practices
• Management of security layers including, but not limited to:
  • Patch Management
  • Vulnerability Scanning
  • Firewall
  • IPS/IDS
  • NAC and Rogue Device Detection
  • Endpoint Protection (AV, EDR, Zero-Day, APT, Anti-Ransomware)
  • SIEM (logging, event correlation)
  • DMARC/SPF
  • DLP/CASB
  • Anti-Phishing/Smishing/Vishing
  • MFA and Password Vaulting
  • Browser Isolation & UTM
  • Dark Web and Brand Monitoring
  • DDoS
  • MDM
  • DNS
  • Certificate Management
  • Cloud Security
  • Data Governance
• Ensure all security infrastructure is monitored at all times, with appropriate alert notifications and escalations in place to align with business continuity goals.
• 9:00am – 5:00pm M-F (remote, unless onsite or dispatch is needed)
• Remote Support after hours as needed
• 24/7 monitoring solutions with on call escalation as needed

ACCOUNTABILITIES AND PERFORMANCE MEASURES

• Innovation Program participation and support.
• Strategic Project success.
• Survey results.
• Team collaboration and support.
• Operational levels.
• Safety and Soundness.
• Vulnerability Management.
• Service Levels for issue or request related tickets.

EDUCATIONAL AND WORK EXPERIENCE REQUIREMENTS

• Minimum 10 years’ experience in technical field with majority focused on cyber security.
• Minimum 5 years’ experience building and administering cyber security products and controls required.
• Minimum 5 years’ experience analyzing and responding to security events preferred.
• Bachelor’s degree in related technical field or equivalent information security certifications.
• Knowledge and experience working with Linux/Unix environment is a plus.
• Expert understanding of DLP technologies, VPN technologies, and next generation Firewall technologies.
• Expert understanding of Microsoft Windows server and cloud technologies.
• Expert understanding working with virtualization technologies like VMWare, Citrix, etc.
• Experience with enterprise systems architectures and components like EntraID, AD, DHCP, DNS, etc.
• Experience with AI-driven cybersecurity initiatives.
• Working knowledge of AI Systems – Agentic, Generative and LLMs, etc.
• Knowledge of Automation Scripting tools like – Python, PowerShell, JavaScript, Bash etc.
• Knowledge of network design, IP management techniques, routing protocols (ASEoD, BGP and OSPF) encryption, and monitoring tools.
• Comfortable working in cloud platforms like Amazon AWS, Google Cloud and Microsoft 365.

ADDITIONAL/ IMPORTANT SKILLSETS

• Financial industry experience highly preferred.
• Works cohesively with teammates locally and in remote offices; shares knowledge and is seen as someone to go to for help; contributes in peer meetings.  Help foster a work environment of trust, and openness.
• Ability to problem solve issues by taking ownership, understanding need for temporary fixes, with ability to implement permanent solutions.
• Strong verbal and written communication; listens to peers and supported employees; follows directions and provides useful feedback.
• Ability to use good judgment when adhering to department and end user and/or member confidentiality.
• Generate new ideas, challenge the status quo, support change and use creativity to solve problems through a commitment to the use of innovative and modern approaches to work.
• Be proactive while remaining flexible and adaptive to the evolving needs of all Credit Union staff.

PHYSICAL REQUIREMENTS:

To perform this job successfully, the employee must be able to perform each essential job duty satisfactorily. All employees must be able to communicate face to face or through technology with or without reasonable accommodation. Employee will be in an office environment (well-lighted, heated, and air-conditioned) typically stationed at a desk or table. Employee will be asked to sit and stand for various increments of time, and to lift/push up 10 lbs. Clerical office duties on various forms of technology are required. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential job functions.

All positions that have lending responsibilities must comply with all requirements under the SAFE ACT, as well as the Credit Union’s policies and procedures related to the SAFE ACT. This includes an obligation on the employee’s part to ensure that NMLA registration pertaining to the SAFE ACT is kept current. The employee must notify the Credit Union within 30 days of any changes that need to be reflected on the NMLS registry.

Georgia’s Own Credit Union is an equal opportunity employer and will not discriminate against any employee or applicant on the basis of age, color, disability, gender, national origin, race, religion, sexual orientation, veteran status, or any classification protected by federal, state, or local law. Consistent with obligations under federal law, every company that is a federal contractor or subcontractor is committed to taking affirmative action to employ and advance women, minorities, disabled veterans, special disabled veterans, veterans of the Vietnam era, and other eligible veterans. 

We are an equal opportunity employer. Employment selection and related decisions are made without regard to sex, race, age, disability, religion, national origin, color or any other protected class.