Security Engineer II

We recognize that in order to meet the needs of our communities, we must represent our communities. Our success relies on creating a culture where we have diverse perspectives and a true sense of belonging. This is a journey, and we pledge to do more than simply check the box.

When you join the Meritrust team, your benefits will include:

• Comprehensive medical insurance plan
• Dental and vision insurance
• Generous paid-time-off
• 12 paid holidays
• Annual bonus (discretionary bonus based on achievement of organizational scorecard results)
• 401(k) plan
• Wellness program
• Tuition assistance
• Employee loan discount
• Employee Assistance Program (EAP)
• Life and disability coverage
  
  

What sets working for Meritrust apart?

• Career development and pathing opportunities to move into leadership roles or other lines of business within MCU such as Commercial Lending, Finance, Marketing, Underwriting, Member Solutions, Training, Human Resources, and more.
• Supportive and engaging work environment.
• A wellness and sustainable work culture that puts family, Mother Nature, our community, and your health first.
• A work environment that encourages personal as much as professional growth, teamwork to make the dream work, and treating everyone equally.
• Studies have shown that individuals from marginalized and or historically underrepresented groups may be less likely to apply for jobs unless they meet every one of the qualifications listed. We are most interested in finding the best candidate for the job. We would encourage you to apply for a job at Meritrust Credit Union, even if you don’t meet every one of our qualifications listed.
  
  

This is a full-time position working 40 hours a week, Monday-Friday 8:00am - 5:00pm.

Position Summary

The Security Engineer II is responsible for the implementation, maintenance, and operational support of information security technologies that protect the Credit Union’s systems, networks, and information assets. This role works closely with Information Security leadership and IT teams to identify security risks, implement technical controls, and support compliance with regulatory and industry standards. The Security Engineer II applies a proactive, detail oriented approach to securing enterprise, cloud, and SaaS environments.

Essential Functions

• Design, implement, configure, and maintain information security tools, technologies, and controls to protect corporate systems and data.
• Assist with implementing and maintaining information security architecture, standards, and best practices.
• Support the development and maintenance of system security requirements, baselines, and hardening standards for infrastructure, applications, cloud, and SaaS platforms.
• Monitor security tools and alerts, investigate potential threats, and assist with timely incident response and remediation.
• Perform security assessments, vulnerability scans, and system audits to ensure compliance with information security policies, procedures, and standards.
• Assist with preparation, testing, and documentation of incident response plans.
• Support security investigations by collecting evidence, documenting findings, and assisting with root cause analysis.
• Assist with aligning security controls to applicable frameworks such as PCI DSS, NIST 800 53, ISO 27001, CIS, MITRE ATT&CK, and OWASP Top 10.
• Implement and maintain security appliances and platforms including endpoint protection, firewalls, IDS/IPS, MDM, proxies, SIEM, and vulnerability management tools.
• Collaborate with IT teams to ensure secure configuration, deployment, and operation of hardware, software, and network infrastructure.
• Assist with vendor security reviews and due diligence activities as needed.
• Maintain system and security design documentation and operational procedures.
• Provide security related guidance and support to IT staff and business partners.
• Participate in regulatory exams, audits, and internal reviews by providing documentation and technical support.
• Stay current on emerging threats, vulnerabilities, and security technologies relevant to the financial services industry.
• Travel to branch locations as needed to support security initiatives.
• Preserve the confidentiality of Credit Union data and records.
• Perform other duties as assigned.