MIS Security Engineer

Wildhorse Resort Casino
Pendleton, OR 97801, USA

WAGE RANGE: $90K -$125K

OPEN UNTIL FILLED, 1ST PULL DATE : NOVEMBER 6TH, 2026

JOB SUMMARY

This is considered a SR position. Security Engineer is a hands-on technical leader responsible for building and operating a practical cybersecurity program that protects WRC’s systems, data, and 24/7 business operations. Working with the IT Manager, this role turns business risks into security priorities, implements and tests controls, and leads detection and incident response. The Security Engineer supervises the Security team and provides technical direction and support to the Network, Systems, and Service Desk teams as they secure their areas of responsibility.

The role owns data security practices and helps leadership make informed risk and investment decisions, balancing protection, operational reliability, staff capabilities, and cost.

ESSENTIAL JOB FUNCTIONS
:

• Develops and maintains a risk-based cybersecurity roadmap to translate business needs, threat exposure, and control gaps into practical and achievable priorities that account for staffing, skills, budget, company culture, and the needs of a 24/7 operation.
• Leads, mentors, and supervises the Security team, setting expectations, assigning work, providing training, and reviewing performance. Serves as senior IT leader and assists in representing Wildhorse leadership to IT members and WRC team members alike. Accountable for the Security team’s readiness, work quality, and follow-through during projects, routine operations, and incidents.
• Leads implementation of an established cybersecurity framework to assess current practices, define a practical security baseline, and prioritize improvements. Establishes control owners, maintains evidence of implementation, and tests whether controls work as intended.
• Identifies and assesses cyber risks to business services and data, including third‑party dependencies, and estimates potential operational and financial impacts. Maintains a prioritized risk register, tracks remediation, and brings risk acceptance decisions to the IT Director.
• Reports security posture, unresolved risks, control effectiveness, and improvement progress to leadership in clear business terms. Evaluates proposed investments by comparing cost, operational impact, and expected risk reduction, with assumptions and limitations made explicit.
• Designs, implements, and validates security controls across identity, endpoints, networks, applications, and cloud services. This work includes least privilege, multifactor authentication, secure remote access, network segmentation, network access controls, system hardening, and protection of sensitive data.
• Provides security design reviews and technical guidance for projects, expansion, and system changes. Works with Network, Systems, Service Desk, vendors, and business stakeholders to define security requirements, coordinate implementation and testing, and establish clear operational responsibilities.
• Manages the operational relationship with third‑party managed detection and response (MDR) providers. This includes verifying monitoring coverage, investigating and acting on alerts, tuning detections, defining escalation paths, and reviewing provider performance so that security telemetry leads to timely action.
• Operates and maintains security platforms throughout their lifecycle, including configuration, upgrades, monitoring, troubleshooting, and configuration backups. Addresses gaps in logging or coverage and verifies that security tools remain reliable, effective, and supportable.
• Owns the vulnerability management process, coordinating assessment, prioritization, and remediation with system owners. Findings are evaluated against exposure,…