Security Engineer

SCHEDULE
:
Full-time;
Exempt. Typical hours are Monday-Friday (8:00 am – 5:00 pm)

LOCATION
:
Hills Bank Campus / Hybrid Remote Option

BENEFITS:
Our employees are our most valuable assets, so we invest in them with a comprehensive and competitive benefits package. Our philosophy of taking care of the customer extends to taking care of our employees so that they, in turn, can take good care of themselves and their families. Join Hills Bank and let us surprise you with even more perks!

The Security Engineer 2 is a senior security practitioner responsible for engineering, operating, and continuously improving the Bank's cybersecurity controls. The role combines hands‑on security operations, incident response, detection engineering, vulnerability management, identity and access security, endpoint and network protection, cloud security, data protection, automation, and security architecture. This position serves as a Tier 2 and Tier 3 escalation resource and translates threat, risk, compliance, and audit requirements into practical control improvements.

The Security Engineer 2 provides clear, risk‑based recommendations to technical teams and leadership, mentors junior staff, and may lead security work streams, technical evaluations, and response activities.

• Engineer, operate, and continuously improve enterprise security capabilities across SIEM, XDR/EDR, endpoint, network, identity, email, cloud, data protection, vulnerability management, and privileged access platforms.
• Monitor, investigate, and respond to security incidents by assessing scope and impact, preserving evidence, and coordinating containment, eradication, recovery, and stakeholder communication.
• Serve as a Tier 2 and Tier 3 escalation resource and participate in assigned on‑call response for time sensitive security events.
• Develop, tune, and automate detection and response capabilities, including security analytics, alerts, queries, enrichment, evidence collection, response workflows, and reporting to improve coverage, accuracy, and operational efficiency.
• Document incidents and lessons learned, and use exercises and after‑action reviews to improve response procedures and plans.
• Lead vulnerability and exposure management activities, including assessment, risk‑based prioritization, remediation coordination, exception management, retesting, and validation across technology environments.
• Conduct security architecture and design reviews for projects, technology changes, products, cloud services, and vendor integrations.
• Define and document practical security requirements, risks, and control recommendations aligned with business needs and risk tolerance.
• Apply zero trust, least privilege, and strong authentication principles to control access to systems, applications, and data.
• Use defense in depth and secure‑by‑design practices to embed effective controls throughout the technology lifecycle.
• Implement network, system, and application segmentation to reduce exposure, restrict unauthorized access, and limit the impact of security events.
• Incorporate resilience and recovery requirements into new and existing environments to support continuity and timely restoration following a disruption.
• Develop and maintain secure configuration standards and hardening baselines across endpoints, servers, networks, cloud services, applications, and security tools.
• Assess and improve security controls, posture management, and logging in Microsoft 365, Azure, and other approved cloud and software‑as‑a‑service environments.
• Integrate security platforms with asset management, identity, ticketing, and change management processes to enable coordinated visibility, efficient investigations and response, and effective security lifecycle management.
• Supp…