Sr. SecOps Security Engineer

Senior Security Engineer on the Police and Fire Federal Credit Union Information Security team, onsite in Bensalem, PA, responsible for designing, implementing, and maintaining robust security architectures, monitoring with SPLUNK and other controls, and ensuring regulatory compliance.

Responsibilities

• Design, deploy, and manage SPLUNK SIEM for centralized security monitoring, advanced threat detection, and incident response; optimize security operations based on extensive experience.
• Oversee intrusion detection and prevention systems; respond to suspicious activity and incidents.
• Deploy and maintain network-based data loss prevention solutions; develop policies to protect data privacy.
• Conduct regular vulnerability assessments using Nessus; coordinate remediation efforts.
• Implement zero-day threat protection and develop proactive response strategies.
• Manage endpoint protection technologies to defend against malware.
• Implement identity and access management solutions such as Okta and RSA.
• Architect and configure secure network solutions, including firewalls, NGFW, and web content filtering.
• Maintain security architecture documentation and generate regular security posture reports.
• Collaborate with IT and compliance teams, providing guidance on security best practices.

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field; advanced degree or certifications preferred.
• Minimum 5+ years of hands-on information security engineering and administration experience.
• Strong knowledge of perimeter security devices and their configuration.
• Proficiency with virtualization environments, including VMware and other virtualization technologies.
• Analytical problem-solving ability with good judgment.
• Effective written and verbal communication skills for business and technical audiences.
• Solid understanding of financial institution regulations, including NCUA, GLBA, and PCI DSS.

Technologies

• SPLUNK
• ForcePoint Web Content Filtering
• Intrusion Detection/Protection Systems
• Network Based Data Loss Prevention
• Nessus vulnerability scanners
• Zero Day platforms (FireEye, Trellix)
• Endpoint protection technologies (MS Defender, Cisco AMP)
• IAM solutions (Okta, RSA)
• Firewalls and NGFW
• Cisco Secure Workload (CSW) and Cisco ISE
• NetFlow visibility
• StealthWatch

Benefits

• Health insurance (medical, dental, and vision) benefits with premiums covered by PFFCU (75% to 90%)
• 401K with automatic 6% company contribution after 1 year
• Paid time off