Information Security Engineer

Information Security Engineer

Shape the Future of Cybersecurity at Orange County’s Federal Credit Union

Are you an Information Security Engineer ready to Join Orange County’s Federal Credit Union? This role is responsible for strengthening the confidentiality, integrity, and availability of our critical systems across on-prem and cloud environments.

As an Information Security Engineer, you will:

The Information Security Engineer will play a critical role in evolving and maturing the organization’s information security program to ensure the confidentiality, integrity, and availability of Orange County’s Credit Union assets. The program includes policies, standards, guidelines, and controls to manage and prevent risks to Orange County’s Credit Union. Responsible for conducting information security reviews (technology, application and process) and vulnerability / risk assessments, monitoring key / compensating controls and baseline configuration standards, and identifying / remediating control gaps to minimize risks.

• Coordinate and perform risk and vulnerability assessments of the Credit Union’s systems and processes to ensure appropriate controls are in place and recommend / implement controls to remediate risk findings.
• In collaboration with IT Operations / Technology Services / Software Engineering and outside vendors, design and implement security tools, controls and automation frameworks to ensure the integrity, availability and confidentiality of the organization’s data, systems and services on premises and in public cloud.
• Design, develop and document (1) network security architecture and baseline configuration standards for firewalls, routers, switches, load balancers, and related network appliances; (2) device security architecture and baseline configuration standards for servers, workstations and mobile devices; (3) application and data security architecture and baseline configuration standards for databases and enterprise applications; and (4) cloud platform security architecture and baseline configuration standards for AWS and Microsoft Azure services.
• Perform daily operations and monitor events from multiple sources including, but not limited to, SIEM consoles, network and host-based intrusion detection systems, firewall consoles, system logs (Unix and Windows), applications, databases, and other security information monitoring tools.
• Promptly respond to all security incidents; conduct and support breach analysis in collaboration with internal partners and external parties; and provide thorough post-event analysis, documentation and recommendations.
• Provide subject matter expertise on information security in areas such as vendor risk management, application development, database design, network, platform/operating system, and cloud-based services.
• Other duties as assigned.

• Bachelor’s Degree in Computer Science, Information Security, Information Assurance or related technology field.
• 5+ years of experience in information / cyber security and IT risk management (including hands‑on experience in implementing, maintaining, and managing on-prem and cloud-based network / infrastructure / application / data security for the enterprise).
• 2+ years of hands‑on experience in securing AWS and Microsoft Azure cloud infrastructure / applications / services / solutions.
• Relevant security certifications (at least one is required), such as CISSP, SANS GIAC, CompTIA Security+, AWS Certified Security – Specialty, Azure Security Engineer Associate.

Be part of a mission‑driven organization where your expertise directly shapes security strategy and protects our members. You’ll lead meaningful initiatives, collaborate with talented teams, and help advance a modern, resilient security program.

At Orange County’s Federal Credit Union, we don’t just offer banking services, we create meaningful relationships that empower our members and enrich our community. With over 85 years of trust, $3+ billion in assets, and 140,000+ members, we’ve built a reputation for excellence—and we’re just getting started.

Our commitment to people, performance, and purpose has earned us…