Security Engineer II

About the role

The Security Engineer II plays a crucial role in protecting the Credit Union's systems, networks, and information assets. This role collaborates closely with Information Security leadership and IT teams to identify security risks, implement technical controls, and ensure compliance with regulatory and industry standards.

Responsibilities

• Design, implement, configure, and maintain information security tools, technologies, and controls to protect corporate systems and data.
• Assist with implementing and maintaining information security architecture, standards, and best practices.
• Support the development and maintenance of system security requirements, baselines, and hardening standards for infrastructure, applications, cloud, and SaaS platforms.
• Monitor security tools and alerts, investigate potential threats, and assist with timely incident response and remediation.
• Perform security assessments, vulnerability scans, and system audits to ensure compliance with information security policies, procedures, and standards.
• Aid in the preparation, testing, and documentation of incident response plans.
• Assist with security investigations by collecting evidence, documenting findings, and assisting with root cause analysis.
• Implement and maintain security appliances and platforms including endpoint protection, firewalls, IDS/IPS, MDM, proxies, SIEM, and vulnerability management tools.
• Collaborate with IT teams to ensure secure configuration, deployment, and operation of hardware, software, and network infrastructure.
• Assist with vendor security reviews and due diligence activities as needed.
• Maintain system and security design documentation and operational procedures.
• Provide security related guidance and support to IT staff and business partners.
• Participate in regulatory exams, audits, and internal reviews by providing documentation and technical support.
• Stay current on emerging threats, vulnerabilities, and security technologies relevant to the financial services industry.
• Travel to branch locations as needed to support security initiatives.

Requirements

To succeed in this role, candidates should have:

• Bachelor's degree in Computer Science, Information Technology, or a related field.
• Minimum of 3 years of experience in information security, preferably in a financial services environment.
• Experience with security tools and technologies such as firewalls, intrusion detection/prevention systems, SIEM, and vulnerability management tools.
• Knowledge of security frameworks like PCI DSS, NIST 800 53, ISO 27001, CIS, MITRE ATT&CK, and OWASP Top 10.
• Strong analytical and problem-solving skills.
• Excellent communication and collaboration skills.
• Ability to work independently and as part of a team.

Qualifications

Preferred qualifications include:

• CISSP certification.
• Experience with cloud security and SaaS platforms.
• Hands-on experience with security operations and incident response.
• Experience with regulatory compliance processes.

Skills

The ideal candidate should possess:

• Technical proficiency with security tools and technologies.
• Strong understanding of security principles and best practices.
• Effective communication and interpersonal skills.
• Ability to work in a fast-paced, dynamic environment.

Benefits

At Meritrust, we offer:

• Comprehensive medical insurance plan.
• Dental and vision insurance.
• Generous paid-time-off.
• 12 paid holidays.
• Annual bonus (discretionary bonus based on achievement of organizational scorecard results).
• 401(k) plan.
• Wellness program.
• Tuition assistance.
• Employee loan discount.
• Employee Assistance Program (EAP).
• Life and disability coverage.

Pay

This is a full-time position working 40 hours a week, Monday-Friday 8:00am - 5:00pm.

Schedule

This is a full-time position working 40 hours a week, Monday-Friday 8:00am - 5:00pm.