Security Engineer

ABOUT REDWOOD CREDIT UNION (RCU):

At Redwood Credit Union, our mission is to passionately serve the best interests of our Members and communities. Since 1950, we have been dedicated to supporting the financial well-being of our Members through better rates, low or no fees, and best-in-class customer service. Our purpose is to inspire hope and elevate the financial well-being of our communities one person at a time, through good times and bad.

As a not-for-profit financial institution, we are committed to a people-first approach, which is reflected not only in how we serve our Members, but also in how we treat our employees. Our leadership team is deeply focused on fostering a culture of heart and empathy, integrity, passion, inclusion, meaningful relationships, excellence, and ensuring financial well-being for all. 

Why work for Redwood Credit Union?

•   32nd largest credit union in the U.S. and the largest financial institution based in the North Bay

•   Awarded a 5-Star Rating based on 6/30/24 financial data by Bauer Financial

•   Recognized by Newsweek as one of "America's Best Credit Unions 2024"

•   Recognized by Forbes as one of “America’s Best Small Employers 2023" 

•   Voted Best Places to Work in the North Bay 19 years in a row

•   World-class Employee Engagement scores

•   Rated Superior in Service by more than 90% of Members, surveyed by SF Gate

•   Industry leading Net Promoter Scores across the U.S.                                                                                                                                                                                                                                              

Join us and discover why you'll love working at Redwood Credit Union! 

Redwood Credit Union is looking for a Security Engineer, who will be responsible for establishing and implementing security policies, practices, technologies and tools to protect Redwood Credit Union’s critical information resources across cloud, network, and application & infrastructure security, with a focus on Identity & Access management, Incident Response and Security Engineering. Collaborate with architects, engineers, developers, internal audit, lines of business, and management to ensure efficient and effective security controls are in place and maintained in a continually changing technology environment. In addition, promote information security awareness throughout the company to engage team members, with a focus on continually improving security posture by following industry best practices and meeting internal, Member, and regulatory needs.

Essential Functions

Security Engineering

• Select, implement, and support security tools and systems for preventative, detective, and analysis purposes.

• Conduct regular security assessments, red/purple team pen-tests with external vendors and with internal tooling.

• Provide high-level security engineering across application security, network security, cloud security and infrastructure security domains.

• Design, implement, and monitor security controls against CIS /NIST.

• Develop Advanced Threat hunting rules, playbooks, and automations. Build in advanced threat intel into detection rules and analytics.

• Manage SIEM and alerting, being the last line of escalation for alerts, leading investigations alerting across all security stack products.

• Review new projects and designs for appropriate security policies, procedures, and controls. Assist with the design of security environments for new and existing systems.

• Respond to security incidents as a first responder, lead the resolution of security issues, and perform forensic analysis post resolution. Provide analysis and recommendations to prevent or mitigate future incidents, and work with all teams necessary to implement the recommendations.

• Research new vendor offerings and industry trends and recommend new software, process, and policy solutions.

• Create and maintain a security framework, security roadmap, security awareness program, security architecture design and documentation, and technical standards, policies, and guidelines related to security.

• Lead the security portion of regulatory and internal audits.

• Prepare and present written and verbal security reports, analysis, and summaries to the CEO, executives, and Board.

• Automate routine work and alerting.

Department Development

• Prepare and present recommendations and updates on projects, support and future needs planning both in writing and verbally.

• Provide mentorship to the IT staff on security related issues.

• Locate and choose new learning opportunities to enhance and further knowledge of Department practices.

• Draft and recommend technology plans and requirements for business needs.

Other Functions

• Maintain technical proficiencies on current and prospective hardware and software.

• Establish and maintain relationships with key contacts in the community including volunteer centers and non-profit organizations.

• Participate in community events, community volunteer boards & associations.

• Experience working with Azure Cloud / Hybrid Environment, Windows / Linux Server Administration, Cisco Networking, XDR Endpoint protection platforms, Exchange & Email Protection products.

• Experience working with Security tooling like Nessus Tenable, Rapid7, Cobalt Strike, Vulnerability Management and Patching tooling like SCCM / Ivanti etc.

• Ability to work with multiple technical teams and departments, breaking down complex problems and recommending solutions in a digestible and clear way to all levels of the business.

• Ability to work with multiple external vendors to manage Redwood’s cybersecurity program, including external SOC teams, Brand Reputation & Protection teams, and external IR teams.

• Current knowledge of processes, procedures, rules, and regulations pertaining to information technology security, with ability to demonstrate understanding in execution of duties.

• Ability to effectively utilize project, change and incident management skills and documentation.

• Ability to work independently with little supervision and/or direction.

• Ability to develop and implement technology projects.

• Ability to interact and communicate with outside vendors and internal clients.

• Ability to communicate effectively both verbally and in writing.

• Ability to establish and maintain effective working relationships with a diverse group of people.

• Azure Security Engineer / Administration

• CCNA

• CISSP

• CEH

• Ability to stand for extended periods of time occasionally.
• Ability to stand, bend, stoop, sit, walk, twist and turn.
• Ability to lift up to 50 pounds.
• Ability to use a computer keyboard, calculator, and mouse.
• Work environment is indoors; majority of the time is spent sitting at a desk.

• Ability to travel between branch and corporate locations as needed.

The ideal candidate has a combination of education and experience equivalent to a bachelor’s degree in computer science or closely related field, with a minimum of six years’ progressive IT experience in networks, network security, infrastructure administration, or similar concentration.

Compensation: Base starting range: $119,579 to $157,539 annually commensurate with experience.

Our base salary starting range is based on scope and responsibilities of the position, candidate's work experience, education/training, key skills, and internal peer equity. We offer a competitive total rewards package including a wide range of medical, dental, vision, financial, and other benefits.

Redwood Credit Union offers a robust benefits package to our eligible employees including:

•  Competitive medical, dental, and vision insurance, mental health offerings

•  Employee performance incentive plan

• Salary Advancement– Merit increase based on performance

• 401(k) program with employer match

• Time Off- Competitive PTO accrual plus 11 paid company holidays and your birthday off!

RCU Discounts and Perks:

•  RCU employees are eligible for a .75% discount off RCU standard collateral auto loans

•  RCU employees are eligible for a 1% discount on all recreational or boat loan products

• 2% discount off Visas and LOC Loans through RCU

• 0% interest loan to support employees with various immigration related expenses such as visa application fees and relocation costs. Loan amount up to $1,000.

• 0% interest loan to support employees with expenses associated with the naturalization process. Loan amount up to $15,000.

• 0% interest on garment, fitness, or home office equipment loan of up to $500

• 100% financing for employee purchased homes!

Internal Team Members

If you are a current Team Member, please apply through the internal careers page located in RCUNET.

                                         We are an Equal Opportunity Employer