Senior Information Security Engineer – Risk & Incident Response

Redding Rancheria; Redding (CA); On-site; Full time

Benefits offered by this job

Medical, Dental, Vision, Life Insurance

Short/Long Term disability

Generous 401(k) retirement plan

Paid holidays, vacation, and sick leave

Job summary

A Tribal organization is seeking an Information Security Engineer to safeguard digital assets by designing and implementing robust security measures. This role involves conducting risk assessments and compiling security policies while monitoring compliance with emerging security trends. The ideal candidate will have a Bachelor's degree and 5 years of experience in information security, with strong analytical and communication skills. The position offers a full-time schedule and an excellent benefits package.

Qualifications

• 5 years of experience in information security.
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, CIS).
• Expertise in network security, endpoint protection, identity and access management, and data protection.

Responsibilities

• Design, implement, and maintain security architectures to protect information assets.
• Conduct security assessments, vulnerability scans, and penetration testing.
• Develop and maintain security policies, standards, and procedures.

Skills

Strong analytical skills

Problem-solving skills

Excellent communication skills

Team collaboration

Education

Bachelor's degree in Computer Science, Information Security, or related field

Tools

Firewalls

Intrusion detection systems

SIEM

Encryption technologies

Job description

***This position will be open until filled.***

The Redding Rancheria is seeking a Information Security Engineer. The preferred schedule for this position is Monday through Friday 8:00am-5:00pm.Please be aware that this is not a remote opening.

The listed wage reflects the entry-level rate for this position. Compensation may be adjusted based on experience, education, and qualifications.

JOB SUMMARY:

The Information Security Engineer is responsible for safeguarding the organization's digital assets by designing, implementing, and maintaining robust security measures. This role involves conducting comprehensive risk assessments, vulnerability testing, and penetration testing to identify and mitigate potential threats. The engineer will develop and enforce security policies, procedures, and standards while maintaining up to date knowledge about emerging security trends and technologies. Additionally, they will play a critical role in incident response, ensuring timely and effective mitigation of security breaches. The Information Security Engineer contributes to maintaining the confidentiality, integrity, and availability of the organization's sensitive information and systems.

REQUIREMENTS/MINIMUM QUALIFICATIONS:

• Bachelor's degree in Computer Science, Information Security, or a related field.
• 5 years of experience in information security.
• Strong understanding of cybersecurity frameworks and standards (e.g., NIST, ISO 27001, CIS).
• Expertise in network security, endpoint protection, identity and access management, and data protection.
• Proficiency in security tools and technologies (e.g., firewalls, intrusion detection systems, SIEM, encryption).
• Strong analytical and problem-solving skills.
• Excellent communication and interpersonal skills.
• Ability to work independently and as part of a team.
• Indian preference.

ESSENTIAL JOB DUTIES:

• Design, implement, and maintain security architectures, systems, and solutions to protect information assets.
• Conduct security assessments, vulnerability scans, and penetration testing to identify and mitigate risks.
• Develop, maintain, and implement security policies, standards, and procedures.
• Monitor and analyze security events, incidents, and threats.
• Respond to security incidents in a timely and effective manner.
• Collaborate with Information Services leadership and department members to ensure security is integrated into all aspects of the IT infrastructure.
• Stay up-to-date on the latest security trends and technologies.
• Coordinate with 3rd party vendors to perform audits in compliance with the organizations cyber security policy.

A completed Redding Rancheria job application must be submitted in order to be considered for employment. You can fill out an application online atwww.reddingrancheria-nsn.gov, please fax [phone]) or email ([e-mail]).

All certifications, credentials/ licenses, education verification /degrees and/or transcripts, and Indian verification are required to process your application.

Indian preference applies, but we welcome all applicants who wish to apply for this position. Certification of Native American heritage needs to be attached to the job application.

Any offer of employment is conditioned upon the successful completion of a pre-employment drug screen and criminal background screening clearance. All employees are required to submit to a Tuberculosis test (TB) test after they are hired in addition to being tested annually.

Additional Information:

In addition, Redding Rancheria offers an excellent benefit package containing Medical, Dental, Vision, Life Insurance and Short/Long Term disability, paid holidays, vacation and sick leave as well as a generous 401(k) retirement plan.

Redding Rancheria is a federally recognized Tribe with Pit River, Wintu and Yana people where pride in Tribal culture, history and identity is evident internally and in the larger community. Redding Rancheria is a leader in the constructive development of its people, the larger Indian community and the Redding region.

E-Verify Statement

Redding Rancheria participates in the Electronic Employment Verification Program. Visit the E-Verify URL below for more information.

https://www.e-verify.gov/employees

For further information, please contact Human Resources Dept. at [phone].