Information Security Engineer (On-Site)

Job Description

HAPO Community Credit Union is an organization that believes in providing service that focuses on our members and giving back to the communities in which we do business - "Community" is our middle name. Our Standard of Service is to Defy Expectations. We promote individuality and encourage our employees to Defy Expectations®: To treat every situation as a unique opportunity to be in the moment and go beyond what is expected. We value every member and appreciate the opportunity to serve you.

Come defy expectations with us!

HAPO Health Benefits

• No cost premium health insurance for all employees, including medical, dental and vision
• Accidental death and dismemberment insurance
• Long term and Short term disability

HAPO Professional Benefits

• Competitive pay
• Pension Plan
• 401K program with match
• Flexible spending account (medical and dependent care)
• 0% interest on select personal loans

HAPO Personal Benefits

• Employee Assistance Program (EAP)
• Paid time off
• 11 paid holidays per year
• Paid Birthday day off
• HAPO Anniversary day off
• Volunteer Opportunities (Both Paid and Volunteer)
• Employee Milestone Anniversary Bonus
• Tuition Assistance Program

HAPO is now accepting applications for an Information Security Engineer in Richland, WA. We are seeking an individual who is ambitious, self-motivated and who strives to represent HAPO’s core commitment “Be in the Moment” and standard of service “Defy Expectations” with our members, community as well as the team they are a part of. The Information Security Engineer is responsible for designing and reviewing security strategy and controls that safeguard and protect the organizations computer networks, systems and sensitive information. This position also serves as an expert resource for the Information Security Analyst role. Additional responsibility is assigned for ensuring information security best practices are implemented and enforced through cross-department technologies under the direction of Information Security Management. The InfoSec Engineer is responsible for designing and scheduling vulnerability scans, conducting penetration testing, conducting risk assessment and recommending solutions to identified risks and vulnerabilities.

Essential Job Functions Include But Are Not Limited To

• Deploy and maintain security system configurations according to standards and best practices
• Develop system security standards
• Comply with process change control requirements for any additions and/or modification to systems
• Conduct Information Security based risk assessments
• Provide investigative support in information security incident response and forensics
• Design and implement vulnerability scanning processes and schedules
• Staying current with information security threats, trends and tactics
• Perform vendor information security assessments
• Process information security support requests
• Identify, design and deploy new security solutions and controls as required
• Develop and maintain information security procedures
• Serve as a source of knowledge and reference for the Information Security Analyst
• Become subject matter expert over the systems within the responsibility of the Information Security Engineer
• When needed and under the direction of Information Security Management, provide assistance in the following areas supporting the Information Security Analyst role:
• Assist in monitoring and analyzing information from logging and alerting systems
• Assist in investigating and escalating security alerts
• Assist in monitoring information security systems availability and performance
• Assist in performing threat hunting activities
• Assist in conducting vulnerability scans reviews
• Assist the Information Security Analyst conducting phishing campaigns
• Assist in processing information security support requests
• Assist Information Security Management with developing and maintaining information security policy
  

Skills & Abilities

• Expertise in cyber security threat analysis, detection and prevention.
• Expert in Cyber security risks, threats and prevention technologies.
• Highly skilled in risk assessment and management approaches
• Advanced knowledge of IDS/IPS, SIEM, DLP, Attack Mitigation and Prevention
• Proficient in Security Frameworks (PCI-DSS, NIST 800-53, NIST CSF, CIS Top 20)
• Proficient in Third Party Risk reviews
• Exceptional communicator with both technical and non-technical audiences.
• Windows knowledge and skills.
• Programming and scripting skills
• Web application security skills
• Knowledge of the principles of secure network design
• Supportive and reliable team member
• Self-motivated to insure technical and industry knowledge is current
• Ability to work independently as well as with a team
• Understanding of penetration testing/ethical hacking concepts

Requirements

• High School Diploma or General Education Development (GED) certificate
• A Bachelor degree in Computer Science with at least 2 years of experience (preferred), or 7+ years related experience in an information security role

Location: On-Site Richland (WA)

Schedule: Must be able to work M-F, 35-40 hours a week between the hours of 8:00am – 5:00pm.

• Opportunity for remote-hybrid schedule based on performance after 90 days

Starting Hourly Pay Range (DOE): $104,579.49 - $181,001.60

• Typically, Selected candidates are hired between the minimum and midpoint range, based on applicable experience and qualifications.

HAPO is an equal opportunity employer that values employees and supports an organizational culture of diversity, respect and personal and professional growth.

• Please note that only candidates selected to move forward in the interview process will be contacted. Thank you for your understanding.