Information Security Engineer

Job Category
:
Technology-Information Security

Requisition Number
: INFOR
003744

• Posted :
  August 28, 2026
• Full-Time

Showing 1 location

St. Paul, MN 55107, USA

At Affinity Plus every employee understands how their work affects our members experience and we strive to provide an experience that can't be found anywhere else. Great service starts with great employees and that is why we focus on providing not only the best place our members will ever bank but the best place our employees will ever work. Between our one of a kind culture, incredible benefits, and work/life balance;

we believe you will feel the Affinity Plus difference.

The Information Security Engineer plays a key role in protecting Affinity Plus Federal Credit Union from cybersecurity threats by designing, implementing, managing, and continuously improving the technologies and controls that support the Information Security Program. This position is responsible for maintaining and enhancing security infrastructure, supporting threat detection and response capabilities, conducting security assessments, and collaborating with internal teams and external partners to strengthen the organization’s security posture.

The role serves as a technical subject matter expert and helps ensure security systems, processes, and defenses are effective against current and emerging threats while supporting the confidentiality, integrity, and availability of corporate data and resources.

• Serve as a key resource in the evaluation, selection, implementation, configuration, and ongoing management of information security tools, technologies, and platforms.
• Maintain, support, and optimize the security infrastructure and technologies utilized by the Information Security Program.
• Collaborate with technology teams to ensure security solutions are effectively integrated, configured, and maintained across the enterprise.
• Evaluate existing security controls and recommend enhancements to improve operational effectiveness, efficiency, and security posture.
• Lead the implementation and lifecycle management of security technologies, ensuring solutions remain current, supported, and aligned with organizational needs.

• Collaborate with Information Security team members to develop, maintain, and continuously enhance Security Information and Event Management (SIEM) capabilities and detection strategies.
• Coordinate with threat intelligence sharing organizations and security partners to facilitate the collection, analysis, and sharing of relevant threat intelligence.
• Conduct threat intelligence, threat hunting, and reconnaissance activities to identify emerging threats, assess risks, and improve organizational preparedness and response capabilities.
• Monitor and evaluate threat intelligence information to identify potential impacts to the organization and recommend appropriate mitigation strategies.
• Act as a technical resource during the investigation, analysis, and response to security events and incidents.
• Develop and maintain detection use cases, correlation rules, alerts, and dashboards to improve visibility into potential security threats and suspicious activity.

• Ensure internal and external vulnerability assessments, attack surface reviews, scans, and security testing activities are conducted regularly.
• Analyze assessment results and collaborate with stakeholders to prioritize remediation efforts and reduce organizational risk.
• Partner with third-party security providers and internal teams to support penetration tests, security assessments, tabletop exercises, audits, and related testing activities.
• Validate remediation efforts and verify identified vulnerabilities have been appropriately addressed.

• Assist in the development, implementation, maintenance, and communication of enterprise-wide information security strategies, standards, procedures, and policies.
• Provide technical expertise and recommendations to support strategic security initiatives and program enhancements.
• Research emerging technologies, security trends, vulnerabilities, and threat landscapes to support the continuous improvement of the Information Security Program.
• Collaborate with Information Technology, business stakeholders, and security partners to strengthen organizational cybersecurity capabilities.

• Serve as a technical subject matter expert for information security technologies, controls, and best practices.
• Partner with internal teams to provide security guidance and recommendations for projects, operational initiatives, and technology implementations.
• Support awareness and education efforts by sharing technical security knowledge and best practices with stakeholders across the organization.
• Build and maintain productive relationships with internal teams,…