Sr. SecOps Security Engineer

Police and Fire Federal Credit Union is hiring a Sr. SecOps Security Engineer to design, implement, and maintain security architectures while reducing security risk and supporting regulatory compliance.

Responsibilities

• Design, implement, and manage Splunk SIEM for centralized security monitoring, advanced threat detection, and incident response improvements
• Manage and monitor intrusion detection and prevention systems and respond to suspicious activity
• Deploy and maintain network-based DLP solutions and develop data privacy policies
• Perform regular vulnerability assessments using tools such as Nessus and support remediation efforts
• Deploy zero-day threat protection and develop response strategies
• Manage endpoint protection technologies to defend against malware
• Implement and support identity and access management (IAM) solutions including Okta and RSA
• Architect and configure secure network components including FW, NGFW, and web content filtering
• Maintain security architecture documentation and produce regular security posture reports
• Work with IT and compliance teams to apply security best practices and guide risk reduction

Requirements

• Bachelor’s degree in Computer Science, Information Technology, or a related field; advanced degree or certifications preferred
• 5+ years of hands-on information security engineering and administration experience
• Demonstrated technical knowledge of perimeter security devices and configuration
• Proficiency in virtualized environments, including substantial experience with VMware and other virtualization technologies
• Strong analytic ability and good judgment to assess problems and situations
• Effective business communication and technical writing skills
• In-depth knowledge of financial institution regulations, including NCUA, GLBA, and PCI DSS
• In-depth working knowledge of network perimeter security technologies, including:
  • Web Filter (ForcePoint)
  • SIEM (Splunk)
  • Intrusion Detection/Protection Systems
  • DLP - Network Based Data Loss Prevention
  • Vulnerability Scanners (Nessus)
  • Zero Day technologies (FireEye/Trellix)
  • Email security technologies
  • Cisco Secure Workload (CSW)
  • Cisco Identity Services Engine (ISE)
  • XDR solutions (Cisco AMP, Trellix, MS Defender)
  • FireEye (NX and CMS)
  • MFA (Okta and RSA)
  • StealthWatch
• Working knowledge of Security Risk Assessment Methodology, Vulnerability Analysis, and strong knowledge of SIEM technology (Splunk)
• Monitor and maintain network security appliances to protect system integrity for internal and external entities
• Accurately document current and future InfoSec system configurations and changes following PFFCU change control guidelines
• Serve as Tier 2 escalation contact, including rotating after-hours support
• Develop a working knowledge of the business side of PFFCU and interface effectively with other IT teams using technology
• Strong project skills, including ability to focus and complete multi-month projects
• Experience working with third-party service providers
• Ability to handle multiple projects, prioritize tasks, and think logically with the ability to visualize abstract concepts
• Ability to clearly communicate technical information to all organizational levels and to vendors
• Ability to work varying hours, sometimes including evening and weekend work; participate in an on-call rotation
• Core hours: Monday–Friday 8:00 AM – 4:00 PM

Technologies

• Splunk
• Firewalls, NGFW
• Web Content Filtering (ForcePoint)
• Intrusion detection/protection systems
• Data Loss Prevention (network-based DLP)
• Nessus
• Zero-day threat protection (FireEye/Trellix)
• Endpoint protection technologies
• Okta, RSA (MFA and IAM)
• Identity and access management (IAM) solutions
• VMware and virtualization technologies
• NetFlow Visibility
• StealthWatch
• Zero Day platform
• FireEye (NX and CMS)
• Cisco Secure Workload (CSW)
• Cisco Identity Services Engine (ISE)
• XDR solutions (Cisco AMP, Trellix, MS Defender)

Benefits

• Medical, dental, vision: 75% to 90% of premiums covered by PFFCU
• 401(k): PFFCU contributes automatic 6% after 1 year (regardless of employee contribution)