Security Engineer: Zero-Trust & Threat Detection Expert

OnPoint Community Credit Union; Portland (OR); On-site; USD 110,000 - 150,000; Full time

Job summary

OnPoint Community Credit Union is seeking an experienced information security professional to implement and monitor information security programs and controls. The role protects technology and business data against unauthorized access, disclosure, modification, and deletion.

Key duties include risk management, advising security engineering for technology initiatives, implementing end-to-end data security with DLP and anti-spam/AV, conducting threat simulations, and collaborating with IT and

Qualifications

• Minimum 3 years information security experience or 6 years information systems experience, preferably in financial services.
• Certifications within 6 months: CEH, OSCP, PenTest+, or SC-200.
• Bachelor's degree in related field or equivalent experience.
• Advanced computer skills and practical knowledge of computing systems and software.
• Commitment to corporate values and ethical standards.

Responsibilities

• Establish and apply risk management principles for tracking and measurement per industry standards.
• Act as security engineering technical advisor for technology initiatives.
• Ensure end-to-end system and data security with perimeter monitoring, DLP, and anti-spam/AV solutions.
• Perform risk-analysis for threats using simulations and brief management on findings.
• Support near-zero risk enterprise using telemetry from security tools.
• Test solutions and deliver technical reports on results.
• Engineer security solutions with minimal footprint and manage vendor partnerships.

Skills

Risk management

Security engineering

Threat monitoring

Incident response

Education

Bachelor's degree in related field

Tools

SIEM

DLP

Phishing simulations

IAM / access management

Job description

OnPoint Community Credit Union is seeking an experienced information security professional to implement and monitor information security programs and controls. The role protects technology and business data against unauthorized access, disclosure, modification, and deletion.

Key duties include risk management, advising security engineering for technology initiatives, implementing end-to-end data security with DLP and anti-spam/AV, conducting threat simulations, and collaborating with IT and