Security Engineer

Sierra Central Credit Union; Yuba City (CA); Hybrid; USD 120,000 - 145,000; Full time

Benefits offered by this job

Medical, Dental & Vision Insurance

401(k) Retirement Plan

Paid Time Off

Life Insurance & Disability

Job summary

Sierra Central Credit Union seeks a Security Engineer to build and maintain its cybersecurity program in a Microsoft‑centric environment. You will implement Defender XDR, Entra ID, and cloud security controls, while administering email security and phishing awareness initiatives.

The role supports incident response, vulnerability management, and regulatory compliance efforts within a hybrid work setting at our Northern California headquarters. Expertise in Microsoft 365 security is essential.

Qualifications

• Bachelor’s degree or equivalent combination of education and experience.
• Minimum of four years hands-on cybersecurity engineering experience in a Microsoft‑centric enterprise.
• Experience implementing and supporting Microsoft 365 security & compliance solutions.
• Experience with incident investigation, security event analysis, and response activities.
• Experience administering email security platforms and phishing awareness programs.
• Experience supporting risk management, audit, or compliance initiatives in a regulated environment.

Responsibilities

• Implement, administer, and optimize Microsoft 365 security and compliance solutions.
• Configure security controls for SharePoint Online, OneDrive, Teams, and other cloud platforms.
• Administer enterprise email security technologies and protocols (SPF, DKIM, DMARC).
• Manage phishing simulation and security awareness training programs.
• Assist with cybersecurity incident investigations and response activities.
• Coordinate with MDR providers and security partners for monitoring and threat detection.

Skills

Cybersecurity principles

Security architecture

Incident response

Risk management

Cloud security

Microsoft 365 security

Email security

Phishing awareness

Education

Bachelor’s degree in Cybersecurity, IT, CS, IS, or related field

Tools

Microsoft 365 Defender XDR

Entra ID

Intune

Purview

Defender for Cloud Apps

Job description

About the Opportunity

Sierra Central Credit Union is a member-owned financial institution that has served Northern California communities for more than 70 years. The Security Engineer is responsible for implementing and maintaining the Credit Union's cybersecurity infrastructure, controls, and security operations program. This role plays a key part in developing and operationalizing Sierra Central Credit Union’s cybersecurity program and ensuring the security of information systems, networks, applications, and data. The Security Engineer partners with internal departments, third-party security providers, and regulatory stakeholders to protect the organization from cyber threats while maintaining compliance with applicable regulatory and industry standards.

Essential Functions

• Implement, administer, and optimize Microsoft 365 E5 security and compliance solutions, including Defender XDR, Entra ID, Intune, Purview, and Defender for Cloud Apps.
• Configure and maintain security controls for SharePoint Online, OneDrive, Teams, and other cloud collaboration platforms, including data loss prevention (DLP), sensitivity labelling, information protection, sharing controls, and application governance.
• Administer enterprise email security technologies, including anti-phishing, anti-malware, impersonation protection, secure email gateway policies, and email authentication protocols such as SPF, DKIM, and DMARC.
• Manage and report on the organization's phishing simulation and security awareness training program.
• Assist with cybersecurity incident investigations and response activities, including threat triage, containment, remediation, root-cause analysis, and post-incident reporting.
• Coordinate with managed detection and response (MDR) providers and other security partners to support ongoing monitoring and threat detection activities.
• Support vulnerability management efforts through asset scanning, risk assessment, remediation tracking, and penetration testing initiatives.
• Assist with enterprise risk management activities, including security control design, documentation, evidence collection, third-party risk reviews, and regulatory examinations.
• Support compliance with applicable laws, regulations, and industry standards, including GLBA Safeguards Rule requirements and other financial industry security expectations.
• Participate in data protection and privacy initiatives, including data classification, data governance, insider risk monitoring, and information protection programs.
• Monitor, analyze, and respond to security events, alerts, and suspicious activity across network, endpoint, cloud, and identity platforms.
• Develop and maintain security documentation, standards, procedures, and operational guidelines.
• Collaborate with business units and IT teams to identify and mitigate cybersecurity risks.
• Provide technical guidance, mentoring, and cybersecurity training to junior staff and colleagues.
• Remain current on emerging security threats, vulnerabilities, technologies, and industry best practices.
• Perform other duties and projects as assigned.

Requirements

Required Skills and Abilities

• Strong knowledge of cybersecurity principles, security architecture, threat detection, incident response, and risk management practices.
• Advanced knowledge of Microsoft 365 security and compliance technologies, including Defender, Entra ID, Intune, Purview, and cloud security controls.
• Proficiency in securing cloud collaboration platforms, including SharePoint Online, OneDrive, and Teams.
• Knowledge of email security technologies and protocols, including anti-phishing controls, SPF, DKIM, and DMARC.
• Experience with firewall administration, VPN technologies, network security practices, and related security tools.
• Ability to investigate and analyze security incidents using logs, endpoint telemetry, identity data, and forensic evidence.
• Understanding of vulnerability management processes and remediation practices.
• Knowledge of regulatory, audit, and compliance requirements within a regulated industry environment.
• Strong analytical, problem-solving, and decision-making skills.
• Excellent written, verbal, and interpersonal communication skills with the ability to communicate technical concepts to both technical and non-technical audiences.
• Ability to prioritize multiple projects and deadlines in a fast-paced environment.
• Ability to work independently while collaborating effectively across departments and with third-party vendors.

Required

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
• Minimum of four (4) years of hands‑on cybersecurity engineering experience, including significant experience within a Microsoft‑centric enterprise environment.
• Experience implementing and supporting Microsoft 365 security and compliance solutions.
• Experience with incident investigation, security event analysis, and response activities.
• Experience administering email security platforms and phishing awareness programs.
• Experience supporting risk management, audit, or compliance initiatives in a regulated environment.

Education and Experience

• Bachelor’s degree in Cybersecurity, Information Technology, Computer Science, Information Systems, or a related field, or an equivalent combination of education and experience.
• Minimum of four (4) years of hands‑on cybersecurity engineering experience, including significant experience within a Microsoft‑centric enterprise environment.
• Experience implementing and supporting Microsoft 365 security and compliance solutions.
• Experience with incident investigation, security event analysis, and response activities.
• Experience administering email security platforms and phishing awareness programs.
• Experience supporting risk management, audit, or compliance initiatives in a regulated environment.

Preferred

• Experience within the financial services, banking, or credit union industry.
• Familiarity with NCUA, FFIEC, GLBA, and related regulatory requirements.
• Professional certifications such as CISSP, CISM, GIAC, Microsoft SC-100, SC-200, SC-400, or comparable security certifications.
• Experience with SIEM engineering, including analytics rule development, security automation, and alert triage workflows.
• Experience working with Endpoint Detection and Response (EDR) solutions and managed security service providers (MSSP/MDR).
• Knowledge of privacy frameworks and regulations, including GLBA and CCPA/CPRA.
• Demonstrated experience mentoring, training, or developing security or IT professionals.

Physical Requirements And Work Environment

• Prolonged periods of sitting at a desk and working on a computer – 7 to 8 hours per day.
• Light lifting, carrying, pushing and/or pulling objects up to 25 lbs.
• Intermittent walking, bending, twisting and stooping.
• General office environment: works generally at a desk in a well‑lighted, air‑conditioned cubicle/office, with moderate noise levels.
• Occasional exposure to raised floors, server noise, and limited hot/cold zones.

Work Location

This position is located at our Corporate Headquarters in Yuba City, CA, with hybrid work options available.

Compensation Range

The company anticipates offering an annual salary range between $120,000 to $145,000 for this position at the time of hire. This range includes base salary (or hourly wages) and does not include possible overtime for non‑exempt employees or any applicable performance‑based incentives or commissions.

Annual Merit Increase

Employees are eligible for a discretionary yearly merit‑based salary adjustment, based on individual performance and company results.

Comprehensive Benefits Package

• Medical, Dental & Vision Insurance options
• Voluntary Lines including hospital indemnity, accident, and critical illness policies
• Company Paid HRA (with enrollment in certain health plans)
• Company Paid Basic Term Life Insurance
  • Coverage at 2× annual base salary
• Company Paid Long‑Term Disability Insurance for Full‑Time Employees
• Company Paid Telehealth Services Membership (Teladoc)
• Company Paid Employee Assistance Program (EAP)
• 401(k) Retirement Plan
  • Employer‑funded safe harbor contribution of 3% of employee's eligible earnings
  • Discretionary employer match on employee contributions
• Flexible Spending Accounts
  • HSA
  • Medical FSA
  • Dependent Care FSA
  • Limited Purpose FSA
• Paid Time Off
  • Vacation accruals based on status and tenure within company
  • 12 sick days accrued annually for full‑time employees
  • 1 hour for every 30 hours worked for part‑time employees
  • 11 paid holidays
• Travel Expense Reimbursement
  • All necessary and work‑related travel expenses will be reimbursed in accordance with company policy

The preceding list of duties does not include all tasks and responsibilities that may be required with this position. Additional tasks may be assigned, as departmental and operational needs require.