Sr Information Security Administrator

Kirtland Federal Credit Union; Oregon; Hybrid; USD 120,000 - 180,000; Full time

Benefits offered by this job

Medical, Dental and Vision Insurance

401(k) Retirement savings program

401(k) employer match

Paid time off from day one

11 Paid holidays off during the year

Tuition Reimbursement for College Deg

Employee Clothing Advance

Fitness Reimbursement Program

Employer paid Life Insurance

Employee Assistance Program

Employer paid Short- and Long-Term Dis

Job summary

Kirtland Credit Union seeks a Senior Information Security Administrator to lead enterprise security efforts. You will design and operate security controls, mentor Technology staff, and coordinate vulnerability management, incident response, and regulatory compliance across the organization.

The role supports a flexible work arrangement, including remote options, and offers a comprehensive benefits package. Strong communication and strategic thinking are essential for success.

Qualifications

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred.
• One or more advanced industry related certifications such as CISSP, CISM, GIAC, Security+ etc.
• Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
• Experience supporting audits, examinations, or cybersecurity assessments.

Responsibilities

• Administers, engineers, and enhances enterprise information security systems and controls.
• Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
• Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
• Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
• Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
• Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
• Develops, maintains, and validates technical security baselines and configuration standards.
• Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
• Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.

Skills

Microsoft 365 security technologies

Azure/Entra ID

Active Directory

SIEM platforms

EDR/XDR platforms

Network security technologies

Vulnerability management platforms

Identity and access management

Cloud security concepts

Email security systems

Security frameworks and regulatory req

Security monitoring platforms

Firewalls and intrusion prevention

SQL security configuration

Education

Bachelor's degree in Information Technology or related field

CISSP

CISM

GIAC certification

Security+

CEH

SC-200

SC-300

SC-100

Azure Security Engineer Associate

Tools

SIEM tools (e.g., Splunk)

EDR/XDR platforms

Vulnerability management tools

Microsoft 365 security tools

Cloud security tools

Job description

Working at Kirtland CU is more than a job-it's a career, and one in the financial world! We pride ourselves on helping our employees learn, grow, and advance in any direction they choose. We offer a highly competitive salary, great benefits package and an energetic, vibrant work environment.

We are currently seeking a Senior Information Security Administrator to join Kirtland Credit Union! This is a regular, full-time position. We welcome applications from both local and remote candidates. While hybrid work offers some additional opportunities for in-person collaboration, we are flexible and prepared to support a fully remote arrangement for the best candidate.

Join the rest of our teammates and become eligible for a generous benefits package that we offer:

• Medical, Dental and Vision Insurance
• 401(k) Retirement savings program
• 401 (k) employer match
• Paid time off with accrual starting from day one.
• 11 Paid holidays off during the year!
• Tuition Reimbursement for College Degrees
• Employee Clothing Advance
• Fitness Reimbursement Program
• Employer paid Life Insurance
• Employee Assistance Program
• Employer paid Short- and Long-Term Disability Insurance
• Travel Assistance Program

Primary Job Duties:

• Administers, engineers, and enhances enterprise information security systems and controls.
• Serves as the primary technical subject matter expert for enterprise security technologies and security architecture.
• Designs, implements, configures, and maintains security solutions including endpoint protection, EDR/XDR platforms, SIEM systems, vulnerability management platforms, email security systems, data protection technologies, privileged access controls, identity services, cloud security tools, and network security systems.
• Evaluates emerging threats, vulnerabilities, attack techniques, and security technologies and recommends appropriate technical mitigation strategies.
• Leads security hardening efforts for servers, workstations, network infrastructure, cloud platforms, storage systems, and business applications.
• Maintains secure authentication, authorization, least privilege, and separation of duties controls across enterprise systems.
• Develops, maintains, and validates technical security baselines and configuration standards.
• Assists with the evaluation, implementation, and integration of new technologies to ensure appropriate security controls are incorporated during deployment.
• Provides advanced technical guidance and mentorship to Technology personnel regarding secure system administration and cybersecurity best practices.
• Leads enterprise vulnerability management and security remediation activities.
• Oversees vulnerability identification, validation, risk analysis, prioritization, and remediation activities across all technology platforms.
• Coordinates vulnerability scanning activities and reviews results for accuracy and remediation planning.
• Performs technical analysis of security findings, penetration test results, audit findings, and vendor assessments.
• Works directly with system administrators, engineers, vendors, and application owners to develop remediation plans.
• Verifies completion and effectiveness of remediation activities through testing and validation.
• Maintains vulnerability and remediation tracking records to support audit and compliance requirements.
• Supports secure patch management practices and assists in establishing remediation priorities based on risk.
• Performs advanced monitoring, threat detection, and incident response functions.
• Investigates security alerts, suspicious activities, and indicators of compromise identified through security monitoring systems.
• Coordinates technical response efforts for security incidents including malware, ransomware, unauthorized access attempts, data exposure events, and system compromises.
• Conducts root cause analysis and develops recommendations to reduce recurrence.
• Works directly with managed security service providers, SOC providers, vendors, and law enforcement contacts as directed.
• Collects, preserves, and analyzes security event data and evidence required for investigations.
• Develops and maintains detection use cases, alerting logic, dashboards, and monitoring capabilities.
• Participates in incident response testing and recovery exercises.
• Assists in execution of breach response procedures and containment activities when required.

Education/Certification:

• Bachelor's degree in Information Technology, Information Security, Cybersecurity, Computer Science, or related field preferred
• One or more advanced industry related certifications
• CISSP
• CISM
• GIAC certification
• Security+
• CEH
• SC-200
• SC-300
• SC-100
• Azure Security Engineer Associate

Experience:

• Minimum 5+ years of progressive experience in Information Security
• 3+ years working in a regulated financial services, banking, or credit union environment preferred .
• Experience with vulnerability management, security monitoring, incident response, and regulatory compliance.
• Experience supporting audits, examinations, or cybersecurity assessments

Knowledge, skills and abilities:

• In-depth knowledge and experience in the following information security areas: Microsoft 365 security technologies
• Azure/Entra ID
• Active Directory
• SIEM platforms
• EDR/XDR platforms
• Network security technologies
• Vulnerability management platforms
• Identity and access management
• Cloud security concepts
• Email security systems
• Security frameworks and regulatory requirements
• Security monitoring platforms
• Firewalls and intrusion prevention systems
• Identity and access management solutions
• SQL security configuration experience preferred
• Ability to independently analyze complex technical and security issues and develop effective solutions.
• Ability to make sound risk-based decisions under pressure and during incident response activities.
• Demonstrated ability to lead technical initiatives and serve as a senior technical advisor.
• Strong analytical, troubleshooting, and problem-solving abilities.
• Excellent written, verbal, and presentation communication skills.
• Ability to communicate technical concepts effectively to both technical and non-technical audiences.
• Strong organizational and project coordination skills.
• Self-motivated, highly accountable, and capable of operating with minimal supervision.
• Experience working effectively in a team-oriented and collaborative environment.

Kirtland Credit Union is an equal opportunity employer. All aspects of employment including the decision to hire, promote, discipline, or discharge, will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.