Principal Cybersecurity Engineer

This is a fully remote position, open to applicants in Oregon.

📋 Description

• Collaborate with Technology Services and Information Security to deploy security solutions and ensure continuous patching, maintenance, vulnerability management, and adherence to security policies.

• Deploy sanctioned security solutions across endpoint devices, mobile devices, servers, systems, software, architectures, and services.

• Address findings from security evaluations and vulnerability scans by coordinating with internal teams, auditors, regulatory bodies, vendors, and penetration-testing companies to mitigate recognized risks.

• Create and apply operating systems and network hardening baselines.

• Engage in the development and implementation of new security platforms and strategies.

• React to production incidents and support ongoing technological and business platform requirements.

• Maintain thorough technical documentation, including data flows, repositories, and integration points.

• Offer technical guidance and training to Technology Services team members on security best practices and protocols.

• Contribute to disaster recovery, business continuity, and OCCU's broader technology strategy.

• Keep up-to-date with emerging cybersecurity threats, trends, technologies, and security practices.

⛳️ Requirements

• At least five years of experience working with computer systems in a technical cybersecurity role, focusing on endpoint protection and network security architecture.

• Strong understanding of cybersecurity frameworks and standards, including NIST, ISO 27000 series, and CIS Controls.

• Proficiency with endpoint protection platforms such as Cisco AMP, CrowdStrike, or Symantec Endpoint Protection.

• Solid knowledge of network security technologies, including firewalls and VPNs.

• Experience with cloud security principles and technologies, such as AWS, Microsoft Azure, or Google Cloud.

• Demonstrated knowledge and experience with Microsoft systems and application technologies.

• Strong skills in troubleshooting, analysis, communication, and interpersonal relations.

• Experience in deploying systems, software, and configuration changes, including implementation of rollback plans.

• Familiarity with scripting languages and automation tools.

• Experience in configuring systems and applications and supporting secure technology solutions.

• Experience working within an ITIL environment, including change control and configuration management practices.

• GIAC Security Operations Certified.

• Experience with system and application monitoring platforms and technologies such as syslog, Splunk, NetFlow, and What's Up Gold.

• Bachelor's degree in Computer Science, Information Technology, Cyber Security Architecture, or a related field, or an equivalent combination of education and experience may be considered in lieu of the educational requirement.

• Preferred: Knowledge of network switching and routing technologies and products, including Cisco and Juniper.

• Preferred: Familiarity with SAN technologies and products such as NetApp and EMC.

• Preferred: Experience with VDI technologies.

• Preferred: Skills in system and application performance tuning.

🏝️ Benefits

• Affordable medical, dental, and vision insurance.

• 401(k) retirement plan with employer matching.

• Paid time off.

• 13 paid holidays.

• Tuition reimbursement for eligible education and training.

• Company-paid long-term disability.

• 40 hours of company-paid core time annually for full-time employees to engage in community volunteer opportunities.