Cyber Security Engineer

VENTURA COUNTY CREDIT UNION•Ventura, CA

1d•$118,547 - $125,700•Onsite

About The Position

The Cyber Security Operations Engineer is responsible for monitoring, defending, and enhancing the organization’s security posture across all digital assets, networks, cloud platforms, and endpoints. This role designs, implements, and manages security operations tools and processes, responds to incidents, and proactively hunts for threats. The engineer collaborates with Technology teams, Risk, and Compliance teams to ensure robust protection against evolving cyber threats and regulatory requirements. A core responsibility is providing operational oversight and technical collaboration with VCCU’s Managed Security Service Provider (MSSP) vendor. The engineer ensures the MSSP delivers continuous monitoring, rapid detection, and effective remediation of cyber threats, and coordinates escalation and resolution of complex incidents. The engineer reviews MSSP performance, validates incident handling, and ensures alignment with VCCU’s operational standards and technical requirements. This is a key member of the Technology team and requires fully onsite work at VCCU’s OceanView Headquarters.

Requirements

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field.
4+ years of experience in security operations, incident response, or similar role. Including hands-on experience with SIEM platforms, endpoint protection, firewalls, and cloud security tools.
Proficiency in scripting languages (Python, PowerShell, Bash) for automation and analysis.
Strong understanding of network protocols, operating systems (Windows, Linux), and cloud platforms (AWS and Azure).
Knowledge of security frameworks and compliance standards (NIST, ISO 27001, SOC 2, GDPR).
Continuing education is required to maintain current knowledge of technological advances (seminars, conferences, certifications, technical articles, etc.).

Nice To Haves

Professional certifications preferred (e.g., CISSP, CISM, CEH, Security+, GIAC).
Ability to effectively communicate technical concepts and strategies to staff, top management, business stakeholders, and external partners.
Driven by purpose, with a genuine commitment to the Credit Union philosophy of “people helping people.”

Responsibilities

Monitor security alerts and events using SIEM platforms (e.g., Splunk, Sentinel) and other security tools.
Conduct threat hunting, vulnerability assessments, and penetration testing across on-premises and cloud environments (AWS, Azure, GCP).
Respond to and investigate security incidents, coordinating with incident response teams to contain and remediate threats.
Develop, implement, and maintain automated incident response playbooks and security workflows.
Configure, optimize, and maintain security controls, including firewalls, IDS/IPS, endpoint protection, and cloud security tools.
Analyze logs and network traffic to identify suspicious activity and potential breaches.
Maintain up-to-date knowledge of the latest cyber threats, vulnerabilities, and security technologies.
Collaborate with Enterprise Infrastructure and MSSP to integrate security into on-prem and cloud-native architectures.
Ensure compliance with security frameworks and regulations (NIST, ISO 27001, SOC 2, GDPR).
Prepare detailed reports documenting security incidents, investigations, and remediation actions.
Develop and enforce security standards, policies, and best practices for the organization.
Participate in disaster recovery and business continuity planning and testing.
Provide technical guidance and training to staff on security awareness and secure practices.
Working with Enterprise Application technology and providing technical support to VCCU staff. Includes Microsoft Services Technology Stack such as; Entra, PurView, Defender, Exchange, Share Point, etc… Solution tools include Auvik, Sophos, Manage Engine, Proof Point, Datto RMM
Continuously evaluate and improve security operations processes and technologies.
Secondary support for Help Desk technicians for escalates support issues.