Assistant Manager Cybersecurity-Hybrid

Logix Federal Credit Union; Santa Clarita (CA); Hybrid; USD 139,000 - 222,000; Full time

Job summary

Logix Federal Credit Union is seeking an Assistant Manager, Cybersecurity Engineering to translate security strategy into practical controls across endpoints, networks, cloud, and data. You will lead security engineering efforts, mentor engineers, and collaborate with cross‑functional teams to embed security into initiatives and vendor engagements.

The role emphasizes hands-on technical leadership, risk-based prioritization, and continuous improvement of security postures aligned with regulatory

Qualifications

• 5+ years of progressive cybersecurity experience including hands-on security engineering or operations.
• Experience in financial services or regulated industries is preferred.
• Strong knowledge of NIST CSF 2.0, CIS Controls, Zero Trust, and PCI DSS/GLBA/FFIEC guidance.

Responsibilities

• Design, implement, operate, and improve enterprise cybersecurity platforms and controls.
• Provide hands-on support for endpoint, network, identity, data, cloud, and vulnerability management.
• Develop runbooks, standards, secure configurations, and engineering documentation.
• Lead and coach assigned team, manage intake, prioritization, and cross-training.
• Collaborate with IT, Architecture, Infrastructure, Cloud, and business teams to embed security into projects.
• Support vulnerability management, threat exposure, and risk-based prioritization with escalation as needed.
• Improve detection and response through playbooks, dashboards, and SLAs.

Skills

Cybersecurity architecture

Threat detection

Incident response

Cloud security

Regulatory knowledge

Education

Bachelor's Degree in cybersecurity/IT/CS or related field

Job description

If you love connecting with people and are ready to grow your career in a company that invests in your success, we’d love to meet you. Come be part of something amazing where your contributions truly matter. Where a hybrid schedule offers the perfect balance of in-person collaboration and remote flexibility, supporting a great work-life harmony.

Assistant Manager, Cybersecurity Engineering

supports the Manager, Assistant CISO in designing, implementing, operating, and continuously improving Logix’s cybersecurity controls. This role is a hands‑on technical leader responsible for helping translate security strategy, architecture, risk requirements, and regulatory expectations into practical security capabilities that protect member data, employees, digital services, cloud environments, and enterprise infrastructure. The Assistant Manager provides day‑to‑day technical support across endpoint, network, identity, data, cloud, vulnerability management, detection and response, security automation, and artificial intelligence security, while acting as a backup and escalation point for cybersecurity engineers and subject matter experts reporting through the Manager, Assistant CISO.

Responsibilities

• Support the design, implementation, configuration, integration, and lifecycle management of enterprise cybersecurity platforms and technical controls.
• Provide hands‑on technical support for endpoint detection and response, network security, identity and privileged access management, data loss prevention, cloud security, vulnerability management, security monitoring, incident response, email security, and application security.
• Assist with engineering standards, secure configuration baselines, reference architectures, technical procedures, runbooks, and exception requirements using secure‑by‑design and Zero Trust principles.
• Provide day‑to‑day managerial direction for assigned team, including work intake, prioritization, capacity planning, technical coaching, cross‑training, performance input, documentation quality, and backup coverage for engineering subject matter experts.
• Partner with Information Technology, Enterprise Architecture, Infrastructure, Networking, Cloud, Application, Data, Legal, Compliance, Internal Audit, and business teams to embed security into projects and technology decisions.
• Support vulnerability scanning, penetration testing, threat exposure management, remediation governance, attack‑surface reduction, and risk‑based prioritization. Track findings through closure or the approved exception process.
• Improve security monitoring by helping develop and tune detections, use cases, dashboards, alert thresholds, response workflows, integrations, and automated playbooks. Support measurement of control effectiveness using clear service levels, key performance indicators, and key risk indicators.
• Serve as a hands‑on technical escalation point during cybersecurity incidents. Support investigation, containment, eradication, recovery, evidence preservation, lessons learned, and improvements to incident response plans and playbooks.
• Evaluate security architecture and controls for cloud platforms, SaaS solutions, third parties, new products, and major technology changes. Help confirm required logging, identity, encryption, data protection, resiliency, and monitoring controls are implemented before production use.
• Support relationships, service performance, technical roadmaps, and escalation paths with managed security providers and cybersecurity vendors.
• Assist with regulatory examinations, internal and external audits, risk assessments, control testing, and remediation activities applicable to a federally insured credit union.
• Prepare concise technical and executive‑ready updates on security posture, operational risk, incidents, vulnerabilities, project delivery, tool performance, and remediation progress.
• Maintain awareness of emerging threats, attacker techniques, vulnerabilities, regulatory expectations, and technology developments. Recommend practical improvements aligned with Logix’s risk profile and business priorities.
• Support the secure adoption of AI‑enabled cybersecurity capabilities for threat detection, investigation, alert triage, threat hunting, vulnerability prioritization, incident response, and analyst productivity.
• Help assess and reduce risks involving generative AI, agentic AI, shadow AI, data leakage, prompt injection, insecure integrations, model and supply‑chain exposure, excessive permissions, and AI‑enabled attacks.
• Assist with technical guardrails for enterprise AI use, including identity, access, data classification, logging, monitoring, human review, testing, third‑party risk, and secure configuration requirements.
• Partner with governance and business stakeholders to align AI security practices with the NIST AI Risk Management Framework, its Generative AI Profile, applicable financial‑services guidance, and Logix policies.
• Build and maintain automation using APIs, scripting, orchestration, and workflow platforms to reduce repetitive work, improve consistency, and accelerate response while preserving human oversight for material decisions.
• Review AI‑generated recommendations and automated actions for accuracy, explainability, privacy, security, bias, operational impact, and auditability before production use.
• Perform other duties as assigned by the Manager, Assistant CISO or Chief Information Security Officer.

Qualifications

Education

• 4 Year / Bachelor’s Degree preferred.
• Bachelor’s degree in cybersecurity, information technology, computer science, engineering, or a related field preferred. Equivalent relevant experience may be considered.

Experience

• A minimum of 5 years of progressive cybersecurity experience, including hands‑on experience supporting security engineering, security operations, major security programs, or cross‑functional technical initiatives.
• 1 to 3 years of experience in financial services, credit unions, banking, or another regulated industry strongly preferred.

Knowledge, Skills & Ability

• Strong working knowledge of cybersecurity architecture, engineering, operations, threat detection, incident response, vulnerability management, identity security, data protection, and cloud security.
• Working knowledge of NIST Cybersecurity Framework 2.0, NIST AI Risk Management Framework, CIS Controls and Benchmarks, Zero Trust, MITRE ATT&CK, PCI DSS, GLBA, NCUA requirements, and FFIEC guidance.
• Ability to translate risks and regulatory requirements into clear technical controls, engineering tasks, measurable outcomes, and concise reporting.
• Strong troubleshooting, systems thinking, analytical judgment, and root‑cause analysis skills across complex hybrid environments.
• Ability to balance risk reduction, member protection, user experience, operational resilience, cost, and business delivery.
• Experience supporting vendors, managed security providers, service levels, technical escalations, and product roadmaps.
• Clear written and verbal communication skills with the ability to work effectively with engineers, leaders, auditors, regulators, vendors, and business partners.
• Ability to support incidents, competing priorities, incomplete information, and rapid changes in threats and technology.
• Commitment to continuous learning, ethical use of AI, secure innovation, documentation, and knowledge sharing.

Disclaimer

Equal Opportunity Employer/Veterans/Disabled

Pay Range

USD $138,953.08 - USD $222,324.92 /Yr.