Security Engineer

Edge Services; Oregon (WI); Hybrid; USD 90,000 - 130,000; Full time

Job summary

Navy Federal Credit Union seeks a senior IoT security professional to lead technology-driven process transformation across IT, OT, and security teams, ensuring compliant, protected operations.

The role focuses on IoT/ICS security, data flows, and architecture, collaborating with risk, security, and audit to deliver robust, scalable solutions in a complex environment.

Qualifications

• Experience with Surveillance Systems and Cyber Security.
• Strong OT security knowledge and risk-based management.
• Experience with IoT platforms such as ORDR, ARMIS, Azure IoT or Cisco IoT Hub.
• Proven ability to articulate IoT concepts to senior management.
• Minimum 7 years of Information Security and Physical Security Experience.
• Minimum of 5 years of Industrial Internet of things experience including rapid design, prototyping and deployment of embedded systems.

Responsibilities

• Professional understanding of the essential requirements of IoT architecture, scalability, real-time capability, data protection and security.
• Identify security risk in Navy Federal’s IoT device ecosystem and communicate those risks to management and assist with the mitigation efforts.
• Oversee and manage the deployment, integration and configuration of security solutions and any enhancements to existing IoT security solutions and the enterprise's security documents.
• Perform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systems.
• Work with Industry solution providers, equipment manufacturers, and the Enterprise Resource Planning vendor to design and implement the required systems integrations points and data flow to achieve best in class lights-out-operations.
• Partner with sensors specialists to manage new sensors data streaming to IoT platform, and with data scientists and machine learning engineers to take on analytic results and develop it to an application with user interface, integrate with any pre-existing systems, demonstrate successful use cases and wins, etc.
• Understand systems flow, data source, data usage and technical requirements clearly, to meet the functionalities per user requirements.
• Accountable for the improvement and delivery of the applications geared towards the industrial communications and data collection.

Skills

IoT Security

Industrial IT

Cyber Security

Networking

Threat Modeling

Penetration Testing

Data Flows

Stakeholder Influence

Education

Bachelor's degree in a related field

Tools

Azure IoT

ORDR

ARMIS

Cisco IoT Hub

Job description

Job Description – add details here

Description

The successful candidate will be working with IT, industrial internet of things (IoT) and operational technology teams to lead technology driven business process transformation and innovation for Navy Federal Credit Union. They will partner with IT, Risk, Security and Audit teams to establish operational compliance that streamlines operations while protecting the organization

The ideal candidate will serve as a subject matter expert for Physical Security Surveillance systems using Avigilon Unity Cloud Solution having strong cyber/device security and network engineering skills. This candidate will work closely with the team to understand connected devices/internet of things in depth and to document the product details including the security architecture, trust boundaries and data flows. They will provide product security related coaching/mentoring and security expertise for all IoT device teams.

Responsibilities

• Professional understanding of the essential requirements of IoT architecture, scalability, real-time capability, data protection and security
• Identify security risk in Navy Federal’s IoT device ecosystem and communicate those risks to management and assist with the mitigation efforts
• Oversee and manage the deployment, integration and configuration of security solutions and any enhancements to existing IoT security solutions and the enterprise's security documents
• Perform security research, analysis, and testing via threat modeling, vulnerability assessment, penetration testing, and/or social engineering across a wide variety of applications, platforms and systems
• Work with Industry solution providers, equipment manufacturers, and the Enterprise Resource Planning vendor to design and implement the required systems integrations points and data flow to achieve best in class lights-out-operations
• Partner with sensors specialists to manage new sensors data streaming to IoT platform, and with data scientists and machine learning engineers to take on analytic results and develop it to an application with user interface, integrate with any pre-existing systems, demonstrate successful use cases and wins, etc.
• Understand systems flow, data source, data usage and technical requirements clearly, to meet the functionalities per user requirements
• Accountable for the improvement and delivery of the applications geared towards the industrial communications and data collection

Qualifications

• Experience with Surveillance Systems, Cyber Security and Network Security
• Experience with configuring and designing segmented networking
• Knowledge of TCP/IP, HTTP, UDP, and XML
• Knowledge of IoT software platforms such as ORDR, ARMIS, Azure IoT or Cisco IoT Hub
• Proven ability to work creatively and analytically in a problem-solving environment
• Familiarity with OT environment security with risk-based management, vulnerabilities, asset and threat protection, security behavioral analytics, and security environmental configuration
• Note: All the considerations above should be addressed in platforms to include Cloud, On-Prem, Hybrid, with various operating systems
• Minimum 7 years of Information Security and Physical Security Experience
• Minimum of 5 years of Industrial Internet of things experience including rapid design, prototyping and deployment of embedded systems
• Experience with communicating and data collection from systems such as sensors, controllers, and industrial systems
• Able to articulate and present IoT concepts to senior management
• Experience in Industrial environment is an asset
• Experience with PLC, DCS and SCADA is an asset
• Proven success in contributing to a team-oriented environment
• Ability to align and influence critical stakeholders
• Strong supporter of customer centricity. Understands the importance of demonstrating concern for satisfying customers. Passionate about developing goals to improve customer experience
• Retain and convey a positive attitude in challenging circumstances

Skills and Requirements – add details here