Apply on Employer Site

Golden 1 Credit Union · 1 day ago

IT - Info Sec Engineer - Information Security Engineer

Sacramento, CA

Full-time

Onsite

Mid Level

$110K/yr - $117K/yr

3+ years exp

Golden 1 Credit Union is committed to securing sensitive data and critical assets from current and emerging threats. The Information Security Engineer will work closely with technology and application teams to develop security structures and perform assessments of risks and vulnerabilities related to information systems.

BankingFinanceFinancial Services

H1B Sponsor Likely

Responsibilities

Analyze, assess, and respond to various internal and external threats identified by intrusion detection system (IDS)/intrusion prevention systems (IPS), web application firewall, vulnerability scan results and other data sources. Provide recommendations to IT management and monitor to ensure that recommendations are effectively implemented

Perform vulnerability assessments and penetration testing to identify exposures and risks, and report findings to management. Communicate and collaborate with partner teams, service owners, Information Security, and senior leadership to influence, prioritize, and drive the resolution of discovered security findings

Provide consultative security guidance on a constant stream of new products and technologies as a subject matter expert on Golden 1 projects and initiatives

Advise and participate in the development of business systems designs, ensuring hardening standards and configurations meet information security policy and procedures

Work in conjunction with IT to ensure appropriate procedures and processes are in place and effective in the detection and prevention of system intrusions as well as in establishing and managing a functional anti- virus/malware/DLP policy

Determine ways to monitor, measure, test and report on the effectiveness and efficiency of information security controls as well as compliance with information security policies and procedure

Implementation, administration, and maintenance of IDS/IPS, URL filter, email gateway, certificate issuance and control, network management, identity access control, and other information security infrastructure and controls as necessary

Regularly review IDS/IPS/SIEM rules, wireless rogue access point detection configuration and procedures and practices to ensure optimal effectiveness of security in the business environment

Participate in creating access privileges, control structures and resources to ensure optimal efficiency and adherence to information security standards

Engage with internal and external auditors during examinations, providing support and assistance in addressing audit recommendations

Participate in the security development of network systems architecture, design, and ongoing review of system configuration in collaboration with relevant team members and external partners

Keep management updated on outstanding issues that are not resolved in a timely manner in accordance with established escalation procedures

Develop and maintain a clear understanding of the business area needs and incorporating these needs into technical solutions by updating, developing, and maintaining a thorough knowledge of credit union procedures, products, service, and data processing systems

Monitor state and federal laws and regulations related to credit union compliance including Gramm-Leach-Bliley Act (GLBA), Payment Card Industry (PCI), Sarbanes-Oxley Act (SOX), etc. – and privacy laws

Performs other job-related duties as necessary

Qualification

Information SecurityVulnerability AssessmentPenetration TestingSIEM SystemsCybersecurity ConsultingNetwork MonitoringData Loss PreventionCloud ComputingAnalytical SkillsEthicsTechnical GuidanceRegulatory ComplianceTechnical CommunicationIntegrityTeam CollaborationProblem SolvingProject ManagementCommunication Skills

Required

Bachelor of Science in Computer Science, Management Information Systems, Information Security Information Assurance or equivalent work experience

3 years' experience in organizational information security, cybersecurity, information assurance or providing security consulting services

Working knowledge of traditional security controls and technologies, such as SIEM systems, IDS/IPS, public key infrastructure (PKI), IDAM systems, antivirus, and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls

Strong technical and analytical skills, with a background in technology design, implementation, and delivery

Working knowledge SIEM systems, firewalls, threat intelligence, security automation and orchestration solutions, IDS/IPS, data loss prevention (DLP) and other network and system monitoring tools

Demonstrates understanding of network systems and applications including: DNS, LDAP, virtualization, Database design/hardening, Email/secure messaging, Data Loss Prevention, and end point protection

Demonstrate understanding of the NIST CSF and tracking KPIs to validate the cybersecurity program

Demonstrates understanding of Windows, Linux, and cloud computing technologies, including software-, infrastructure- and platform-as-a-service, as well as public, private and hybrid environments

Strong sense of ethics, integrity, and professionalism

Demonstrates the ability to articulate methodologies and concepts; communicate effectively in providing technical guidance and expertise to management and other staff

One of the following security certifications: CEH, Security +, SSCP, SANS GIAC, PCNSA, or equivalent

Company

Golden 1 Credit Union

Glassdoor3.3

Golden 1 Credit Union is a financial cooperative that offers checking, savings, home loan, investment, insurance and online services.

Founded in 1933

Sacramento, California, USA

1001-5000 employees

https://www.golden1.com/

H1B Sponsorship

Golden 1 Credit Union has a track record of offering H1B sponsorships. Please note that this does not guarantee sponsorship for this specific role. Below presents additional info for your reference. (Data Powered by US Department of Labor)

Distribution of Different Job Fields Receiving Sponsorship

Represents job field similar to this job

Trends of Total Sponsorships

2024 (1)

2022 (1)