Principal Cybersecurity Engineer | Credit Union | Remote

OCCU; Eugene (OR); Remote; USD 120,000 - 150,000; Full time

Benefits offered by this job

Low-cost medical, dental, and vision

401(k) with employer match

Paid time off + 13 holidays

Tuition reimbursement

Company-paid long-term disability

Core time for community volunteer

Job summary

OCCU is seeking a Principal Security Engineer to strengthen and protect its technology environment. This remote role partners with Technology Services and Information Security to secure endpoints, servers, networks, and software, while guiding security strategies and platform implementations.

You will lead incident response, threat mitigation, and security governance with a strong emphasis on collaboration, documentation, and continuous improvement in a dynamic credit-union environment.

Qualifications

• Minimum five years of technical cybersecurity experience focusing on endpoints and network security architecture.
• Experience with cybersecurity frameworks (NIST, ISO 27000, CIS Controls).
• Experience with endpoint protection platforms (Cisco AMP, CrowdStrike, Symantec).
• Knowledge of firewalls, VPNs, and cloud security (AWS/Azure/Google Cloud).
• Strong troubleshooting, communication, and collaboration skills.

Responsibilities

• Implement security solutions with patching, maintenance, vulnerability mitigation, and policy enforcement.
• Deploy security across endpoints, servers, networks, and services.
• Respond to findings from security assessments and audits; coordinate with stakeholders to mitigate risks.
• Develop OS and network hardening baselines and security strategies.
• Maintain documentation of data flows, integrations, and configurations.
• Provide guidance and training on security best practices to teams.

Skills

Endpoint protection

Network security

Cloud security

Troubleshooting

Scripting

ITIL

Security governance

Microsoft ecosystems

Threat detection

Education

Bachelor's degree in CS/IT/Cyber Security

Tools

Cisco AMP

CrowdStrike

Symantec Endpoint Protection

Splunk

WhatsUp Gold

NetFlow

Job description

OCCU is a member-owned credit union based in Eugene, Oregon, guided by a clear and meaningful vision: to Enrich Lives. This purpose drives everything we do, from how we serve our members to how we support one another as colleagues. With a strong commitment to community impact, OCCU lives its values of tenacity, humility, and big-heartedness every day.

We are seeking an experienced Principal Cybersecurity Engineer, or Principal Security Engineer, to help strengthen and protect OCCU's technology environment. This is a highly technical, collaborative role working across Technology Services and Information Security to improve our security footprint, protect critical systems, and ensure technology operates securely and reliably.

This position is remote. The salary range for this position is $120,340 - $150,425 annually, depending on experience.

About The Role

As our Principal Security Engineer, you'll bring deep technical security expertise to the systems and technology that support OCCU. You'll partner closely with Technology Services and Information Security to maintain and strengthen the security of endpoints, servers, networks, software, architecture, and services.

This role combines hands-on security engineering with troubleshooting, systems administration, vulnerability mitigation, security platform implementation, and technical guidance. You'll help ensure security policies are put into practice throughout our environment while staying ahead of evolving cybersecurity threats and technologies.

Key Responsibilities

• Partner with Technology Services and Information Security to implement security solutions and ensure ongoing patching, maintenance, vulnerability mitigation, and security policy enforcement.
• Implement approved security solutions across endpoint devices, mobile devices, servers, systems, software, architecture, and services.
• Respond to findings from security assessments and vulnerability scans, working with internal teams, auditors, regulatory agencies, vendors, and penetration-testing firms to mitigate identified risks.
• Develop and implement operating systems and network hardening baselines.
• Participate in the development and implementation of new security platforms and security strategies.
• Help maintain secure, reliable systems by responding to production incidents and supporting ongoing technology and business-platform needs.
• Maintain comprehensive technical documentation, including data flows, repositories, and integration points.
• Provide technical guidance and training to Technology Services team members on security best practices and protocols.
• Contribute to disaster recovery, business continuity, and OCCU's broader technology strategy.
• Stay current on emerging cybersecurity threats, trends, technologies, and security practices.

What We're Looking For

We're looking for someone who combines strong cybersecurity engineering expertise with sound judgment, analytical thinking, and the ability to build trusted partnerships across technical teams.

Required Qualifications Include

• Minimum of five years of experience working with computer systems in a technical cybersecurity capacity, with an emphasis on endpoint protection and network security architecture.
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27000 series, and CIS Controls.
• Experience working with endpoint protection platforms such as Cisco AMP, CrowdStrike, or Symantec Endpoint Protection.
• Strong knowledge of network security technologies, including firewalls and VPNs.
• Experience with cloud security principles and technologies, such as AWS, Microsoft Azure, or Google Cloud.
• Demonstrated knowledge and experience with Microsoft systems and application technologies.
• Strong troubleshooting, analysis, communication, and interpersonal skills.
• Experience deploying systems, software, and configuration changes, including implementation of rollback plans.
• Experience working with scripting languages and automation tools.
• Experience configuring systems and applications and supporting secure technology solutions.
• Experience working within an ITIL environment, including change control and configuration-management practices.
• GIAC Security Operations Certified.
• System and application monitoring platforms and technologies such as syslog, Splunk, NetFlow, and What's Up Gold.

Preferred Skills

• Network switching and routing technologies and products, including Cisco and Juniper
• SAN technologies and products such as NetApp and EMC
• VDI technologies
• System and application performance tuning

Education & Certification

• Bachelor's degree in Computer Science, Information Technology, Cyber Security Architecture, or a related field.

An equivalent combination of education and experience demonstrating the required knowledge, skills, and abilities may be considered in lieu of the outlined education requirement.

Why Join OCCU

OCCU offers a comprehensive compensation and benefits package designed to support your well-being and professional growth, including:

• Low-cost medical, dental, and vision insurance
• 401(k) retirement plan with employer match
• Paid time off plus 13 paid holidays
• Tuition reimbursement for eligible education and training
• Company-paid long-term disability
• 40 hours of company-paid core time annually for full-time employees to participate in community volunteer opportunities

OCCU is an Equal Opportunity Employer and welcomes applications from all qualified candidates. If you're an experienced security engineer who enjoys solving complex technical challenges, strengthening systems, and collaborating across teams to build a more secure technology environment, we encourage you to apply.