Security Engineering
- Select, implement, and support security tools and systems for preventative, detective, and analysis purposes.
- Conduct regular security assessments, red/purple team pen-tests with external vendors and with internal tooling.
- Provide high-level security engineering across application security, network security, cloud security and infrastructure security domains.
- Design, implement, and monitor security controls against CIS v8.1 /NIST CSF 2.0.
- Develop advanced threat hunting and analytic rules, playbooks, connectors and automations. Build in advanced threat intel into detection rules and analytics.
- Manage SIEM and alerting, being the last line of escalation for alerts, leading investigations alerting across all security stack products.
- Review new projects and designs for appropriate security policies, procedures, and controls. Assist with the design of security environments for new and existing systems.
- Respond to security incidents as a first responder, lead the resolution of security issues, and perform forensic analysis post resolution. Provide analysis and recommendations to prevent or mitigate future incidents, and work with all teams necessary to implement the recommendations.
- Research new vendor offerings and industry trends and recommend new software, process, and policy solutions.
- Create and maintain a security framework, security roadmap, security awareness program, security architecture design and documentation, and technical standards, policies, and guidelines related to security.
- Lead the security portion of regulatory and internal audits.
- Prepare and present written and verbal security reports, analysis, and summaries to the CEO and executives.
- Automate routine work and alerting.
- Prepare and present recommendations and updates on projects, support, and future needs planning.
- Provide mentorship to the cybersecurity team and IT staff on security related issues.
- Locate and choose new learning opportunities to enhance and further knowledge of Department practices.
- Draft and recommend technology plans and requirements for business needs.
- Maintain technical proficiency on current and prospective hardware and software.
- Establish and maintain relationships with key contacts in the community including volunteer centers and non-profit organizations.
- Participate in community events, community volunteer boards & associations.
- Perform other duties as assigned.
Minimum Qualification: Knowledge, Skills and Abilities
- Experience working with Azure Cloud / Hybrid Environment, Windows / Linux Server Administration, Cisco Networking, VPN/SASE platforms, XDR Endpoint protection platforms, Exchange & Email Protection products.
- Experience working with Security tooling like Nessus Tenable, Rapid7, Cobalt Strike, Vulnerability Management and Patching tooling like SCCM / Ivanti etc.
- Ability to work with multiple technical teams and departments, breaking down complex problems and recommending solutions in a digestible and clear way to all levels of the business.
- Ability to work with multiple external vendors to manage Redwood’s cybersecurity program, including external SOC teams, Brand Reputation & Protection teams, and external IR teams.
- Current knowledge of processes, procedures, rules, and regulations pertaining to information technology security, with ability to demonstrate understanding in execution of duties.
- Ability to effectively utilize project, change and incident management skills and documentation.
- Ability to work independently with little supervision and/or direction.
- Ability to develop and implement technology projects.
- Ability to interact and communicate with outside vendors and internal clients.
- Ability to communicate effectively both verbally and in writing.
- Ability to establish and maintain effective working relationships with a diverse group of people.
Licenses and Certifications
- Azure Security Engineer / Administration
- CCNA
- CISSP
- CEH
Skills Required
- Experience with Azure cloud and hybrid environments
- Windows and Linux server administration experience
- Cisco networking experience
- Experience with VPN and SASE platforms
- Experience with XDR endpoint protection platforms
- Experience with Exchange and email protection products
- Experience with Nessus/Tenable, Rapid7, and Cobalt Strike
- Experience with vulnerability management and patching tools such as SCCM or Ivanti
- Knowledge of information technology security processes, regulations, and controls
- Ability to manage cybersecurity vendors, including SOC, brand protection, and incident response providers
- Ability to apply project, change, and incident management practices
- Ability to develop and implement technology projects
- Ability to communicate clearly with technical teams, vendors, internal clients, and business leadership
- Bachelor's degree in computer science or a closely related field, or equivalent education and experience
- At least eight years of IT experience, including at least four years in cybersecurity
- Azure Security Engineer or Administration certification
- CCNA certification
- CISSP certification
- CEH certification
What We Do
Redwood Credit Union is a full-service financial cooperative, assisting consumers and small business owners with achieving their financial goals and dreams since 1950. We’re a financial cooperative that truly cares about the financial goals and dreams of those who do business with us. With a wide variety of products and services designed to meet our Members’ financial needs, there’s something for everyone. And each Member actually owns part of the Credit Union and has a voice in what we do and how we do it. An excellent place to work, RCU was recently recognized by Forbes as one of “America’s Best Small Employers 2023.” And for 17 years running, we’ve been awarded Best Places to Work by the North Bay Business Journal. We continue today to build upon a solid philosophical and business foundation—treating Members with respect and personal care while offering unbeatable value. Federally insured by NCUA. Equal housing lender. *** Non-deposit investment products and services are offered through CUSO Financial Services, L.P. (“CFS”), a registered broker-dealer (Member FINRA www.finra.org /SIPC www.sipc.org ) and SEC Registered Investment Advisor. Products offered through CFS: are not NCUA/NCUSIF or otherwise federally insured, are not guarantees or obligations of the credit union, and may involve investment risk including possible loss of principal. Investment Representatives are registered through CFS. Redwood Credit Union has contracted with CFS to make non-deposit investment products and services available to credit union members. Investment representatives at Redwood Credit Union are licensed to transact securities business in CA. For more information concerning CFS or its representative(s) associated with this site, please review FINRA Broker Check by accessing the following link and typing in the firm / representative information in the search field. http://brokercheck.finra.org/Search/Search.aspx









.png)