About the role

The Information Security Engineer will conduct risk and vulnerability assessments while designing and implementing security controls across on-premises and cloud environments. They are responsible for monitoring security events, responding to incidents, and developing baseline configuration standards to protect organizational assets.

What they look for

Information Security Risk Assessment Vulnerability Assessment Network Security Cloud Security AWS Microsoft Azure SIEM Intrusion Detection Systems Firewall Management Incident Response Vendor Risk Management Security Architecture Compliance Data Security Infrastructure Security

Requirements

Candidates must hold a Bachelor's degree in a technology-related field and possess at least 5 years of experience in information security and IT risk management. Additionally, at least 2 years of hands-on experience with AWS and Azure cloud security is required, along with at least one relevant security certification.

Benefits

Health Coverage Dental Insurance Vision Insurance Life Insurance 401(k) Plan Employer Match Paid Vacation Paid Sick Days Paid Holidays Annual Merit Increases Discretionary Bonuses Referral Bonuses Educational Grants

Full description

Information Security Engineer

Shape the Future of Cybersecurity at Orange County’s Federal Credit Union

Are you an Information Security Engineer ready to Join Orange County’s Federal Credit Union? This role is responsible for strengthening the confidentiality, integrity, and availability of our critical systems across on‑prem and cloud environments.

What You’ll Do

As an Information Security Engineer, you will:

The Information Security Engineer will play a critical role in evolving and maturing the organization’s information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes policies, standards, guidelines, and controls to manage and prevent risks to Orange County’s Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks.

ESSENTIAL FUNCTIONS:

Coordinate and perform risk and vulnerability assessments of the Credit Union’s systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.
In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization’s data, systems and services on premises and in public cloud.
Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.
Perform daily operations and monitor events from multiple sources including, but not limited to, SIEM consoles, network and host-based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools.
Promptly respond to all security incidents; conduct and support breach analysis in collaboration with internal partners and external parties; and provide thorough post-event analysis, documentation and recommendations.
Provide subject matter expertise on information security in areas such as vendor risk management, application development, database design, network, platform/operating system, and cloud-based services.
Other duties as assigned.

What You Bring

Bachelor’s Degree in Computer Science, Information Security, Information Assurance or related technology field.
5+ years of experience in information / cyber security and IT risk management (including hands-on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
2+ years of hands-on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security – Specialty, Azure Security Engineer Associate.

Why Join Us?

Be part of a mission‑driven organization where your expertise directly shapes security strategy and protects our members. You’ll lead meaningful initiatives, collaborate with talented teams, and help advance a modern, resilient security program.

At Orange County’s Federal Credit Union, we don’t just offer banking services, we create meaningful relationships that empower our members and enrich our community. With over 85 years of trust, $3+ billion in assets, and 140,000+ members, we’ve built a reputation for excellence—and we’re just getting started.

Our commitment to people, performance, and purpose has earned us the #1 spot in the Orange County Register’s 2024 Best Credit Union list, and the voices of our employees have earned us the Peter Barron Stark Award for Workplace Satisfaction. When you join us, you’re not just taking the next step in your career; you’re joining a team that loves where they work.

The targeted annual salary range is $95,000.00 to $119,000.00. Final offer will be determined based on experience, education, training/certifications and specialized skills.

Perks & Benefits:

Health Coverage: Comprehensive benefits, including Anthem, Delta Dental, and VSP, effective from your first day.
Financial Security: Life insurance at no cost and a 401(k) plan with an employer match up to 6%.
Work-Life Balance: 13 days of vacation and seven (7) sick days annually and paid holidays.
Recognition & Growth: Annual merit increases, discretionary and referral bonuses, as well as educational grants up to $1,000 per year.

This position is currently hybrid-eligible, with the expectation of three days pre-assigned on-site attendance. This role requires California residency and living within a 50-mile commute of our headquarters in Santa Ana.