Principal (Level III) Security Engineer
About the role
The Security Engineer is responsible for testing, deploying, documenting, and improving internal security controls for safety, soundness, and operational efficiency. This role includes project work, including meetings, design, and project tasks. This position requires collaboration with different stakeholders to ensure board approved risk appetite is maintained and deliverables are met. This position includes on-call responsibilities on a rotating basis.
Work Arrangement & Schedule
This position is able to work onsite, hybrid, or remote (must reside within the State of Michigan). To be considered for this role, candidate must currently reside, or have plans to reside upon hire, within the state of Michigan. Occasional travel on a quarterly basis to MSUFCU Headquarters (East Lansing, MI) may be needed. Schedule: Monday - Friday 8:30am - 5:00pm ET. An offer of employment is contingent upon the agreed work arrangement (onsite/hybrid/remote) and work location. MSUFCU may or may not be able to accommodate temporary or permanent changes to work arrangements or allow employment outside the city and/or state of residency in which the new hire resides at the time of offered employment.
Compensation & Benefits
- Salary Range: Principal Security Engineer - $120,000 - $150,000+ annually, depending on experience
- 100% Company-Paid Health, Dental, Vision, Life, and Long-Term Disability Premiums
- Up to 26 days of PTO within your first year, as well as Volunteer Time Off & 11 Paid Holidays
- 401(k) with a company match
- Tuition Reimbursement
- Up to 12 Weeks of Paid Parental Leave
Essential Duties and Responsibilities
- Collaborate on critical IT projects to ensure that security issues are addressed throughout the project life cycle. Participate in project meetings, consult on security related topics, and execute on security related tasks resulting from those projects.
- Manage security configurations and operation standards for security systems and applications.
- Manage advanced security technologies, including but not limited to: SIEM/SOAR, Firewalls, IPS, Endpoint Protection, DLP, and email security technologies.
- Assist in the collection of system information and procedures required by internal and external audits and examinations.
- Assist Security Operations team with security incident response, including determination of root cause, as needed.
- Understand the Credit Union's policies and procedures to ensure compliance and accountability for managing operational risks.
- Adhere to established internal controls and procedures to safeguard assets, prevent fraud, and maintain the integrity of credit union operations.
- Participate in threat assessments, documenting risk and compensating controls.
- Test, implement, and document new security controls in partnership with stakeholders.
- Lead complex security projects and initiatives independently.
- Assist members of the Security Engineering team with complex problems.
- Participate in knowledge transfer to junior Security Engineers.
- Create and maintain Security Engineering standard-type procedures and documentation.
- Assist with strategic direction of the Information Security Program.
- Align with Security Operations and Security Architecture regarding security program objectives.
- Assist in the development of education and training materials for consumption by different business units and stakeholders.
- Perform other duties as assigned.
Job Requirements
- High School Diploma or equivalent required.
- Bachelor's degree in Cybersecurity, Information Security, or similar -OR- 5+ years of experience in Cybersecurity, Information Security, or similar in lieu of a degree
- Previous experience leading a security engineering team from an individual contributor or peer leadership perspective.
- Advanced security certifications required (i.e. GIAC, CISSP, or equivalent)
- CompTIA Sec+ is required.
Competencies
Core Competencies that must be demonstrated by all Credit Union employees include Communicate, Navigate Change & Evolve, Solve Problems & Make Decisions, Plan, Prioritize, and Achieve, and Collaborate.
Functional Competencies:
- Adaptability - Adapts quickly to change and considers new approaches
- AI & Digital Proficiency - Leverages artificial intelligence and digital tools to enhance decision-making, identify trends, and manage emerging risks. Applies AI-driven insights to support due diligence, validate outcomes, and refine prompt engineering techniques. Continuously adapts to advancements in AI to improve efficiency and effectiveness within the role.
- Analytical Thinking - Breaks down complex information into smaller parts.
- Critical Thinking - Takes outside knowledge into account while evaluating information.
- Initiative - Takes proactive and prompt action to accomplish work goals. Takes action to achieve results beyond requirements.
- Research - Investigates and studies sources to understand situations before reaching conclusions or acting.
- Resilience - Thrives and grows in a rapidly changing and complex environment. Displays flexibility, utilizes networks, and adopts a continuous growth mindset to learn from mistakes and bounce back from adversity.
- Teamwork - Works well with internal and cross-functional teams to achieve individual, team, department, and/or organizational goals. Values diverse perspectives and working with others to achieve the best outcome possible.
- Time Management - Manages time and resources to ensure work is completed efficiently.
Physical Demands and Work Environment
- May be required to remain in a stationary position for an extended period.
- Ability to operate standard office technology, equipment, and tools, which may include many hours of computer and phone usage.
- Occasionally needs to move about inside of an office area.
- Exposure to potentially hazardous condition, i.e. robbery. Receives detailed instructions and procedures to be followed to minimize the exposure.
- This position can work in remote, hybrid, or onsite working arrangements.