IT Security Engineer

Citadel Credit Union; Exton (PA); On-site; USD 80,000 - 100,000; Full time

Job summary

A financial institution is seeking an IT Security Engineer to ensure the secure operation of its computer systems and networks. The ideal candidate will manage security measures, conduct audits, and participate in vulnerability assessments. Minimum five years of IT security experience is required, preferably in banking. A Bachelor's degree in a related field and relevant certifications are essential. This role involves proactive security monitoring and collaboration with vendors, supporting incident response and documentation efforts.

Qualifications

• Minimum five years of IT Security experience, preferably in Banking.
• Working knowledge of security protocols, IT systems, security measures, and best practices.
• Familiarity with system and network exploitation and attack vectors.

Responsibilities

• Engineer and maintain security systems to meet security program.
• Participate in internal and external audits, ensuring documentation is current.
• Conduct regular vulnerability assessments and follow up on remediation actions.

Skills

Excellent oral and written communication skills

Analytical skills

Ability to learn and apply new technologies

Security protocols knowledge

Network security measures

Education

Bachelor’s Degree in a related field

Tools

CompTIA Security+

CISSP

CISM

CCNA Security

Job description

The IT Security Engineer’s role is to ensure the secure operation of the Credit Union’s computer systems, servers, and network connections. The role will primarily be responsible for the implementation and administration of network security hardware and software, enforcement of the network security policy, assessment and evaluation of the security of the infrastructure, and compliance with requirements and recommendations of security audits and assessments. The incumbent will also be expected to make suggestions for hardware, software and policy changes that will improve the security posture of the organization.

Responsibilities

• Engineer and maintain security systems to meet credit union’s security program, keep systems current, and stay updated on changes.
• Act as a technical security resource for projects, clearly identifying required tasks and timelines to estimate realistic completion dates, ensuring new products are implemented securely.
• Participate in all internal and external audits, ensuring documentation is accurate, current, and available, and promptly address findings and recommendations.
• Participate in all internal and external security assessments, ensuring documentation is accurate, current, and that testing is non‑intrusive, with timely response to findings.
• Support and contribute to the organization’s security programs, ensuring the team follows incident response procedures when needed.
• Conduct regular vulnerability assessments and follow up on remediation actions for all findings.
• Evaluate infrastructure security, identify improvement areas, and suggest action plans that enhance the posture without hindering functionality.
• Develop or review and regularly enhance system hardening procedures for all infrastructure equipment based on industry standards.
• Manage vendor relationships, analyze internal processes to reduce expenses and increase efficiencies, assist with budgeting and invoice accuracy.
• Work proactively to monitor and improve security of all systems and applications, improving stability and uptime.
• Assist with IT Security Administrator duties as needed.
• Document procedures for all assigned functions and keep them current.
• Participate efficiently in disaster recovery exercises.
• Develop a full understanding of LAN/WAN and infrastructure.
• Keep professional skills up to date with current technology.
• Be a high‑energy individual capable of multitasking and working well in stressful situations.
• Be technically oriented with excellent analytical, organizational, and communication skills.
• Perform additional duties as assigned.

Qualifications and Education Requirements

• Minimum five years of IT Security experience (Banking experience preferred).
• Bachelor’s Degree in a related field required; five years of technical experience may substitute.
• Preferred industry certifications such as CompTIA Security+, GIAC, CISSP, CISM, CCNA Security, SSCP, MCSA (Security specialization).
• Working knowledge of security protocols, IT systems, security measures, and best practices.
• Working knowledge of system and network exploitation, attack vectors, and malware.
• Working knowledge of mobile device security strategies.
• Broad knowledge of network, infrastructure, and telecommunications.
• Working knowledge of servers, software, networking equipment, and infrastructure elements.

Additional Skills/Notes

• Excellent oral and written communication skills.
• Analytical skills, including process flow and systems analysis.
• Ability to learn and apply new technologies, diagnose technical problems quickly, and develop effective solutions.

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor.