Sr. IS Systems Engineer

Role: This position will be responsible for designing, implementing, and maintaining robust security solutions to protect our organization's information assets. This role requires a strong understanding of cybersecurity principles, hands-on experience with security technologies, and the ability to collaborate with cross-functional teams to mitigate risks and ensure the integrity of our systems.

Job Type: Full-time, on-site at our Westminster Administrative office in St Paul, MN

Major Duties and Responsibilities

• Design and implement security infrastructure, including firewalls, intrusion detection systems, VPNs, and endpoint protection solutions, to safeguard company networks and data.
• Develop and enforce security policies and procedures to ensure compliance with industry regulations and best practices. This includes creating incident response plans, access control policies, and security awareness training programs.
• Implement, architect and provide guidance on Identity management best practices
• Implement, architect and provide guidance on Data security best practices
• Remediate vulnerabilities and provide guidance on the method of remediation
• Conduct regular vulnerability assessments and penetration testing to identify and remediate security weaknesses in our systems. Stay updated on emerging threats and recommend proactive measures to strengthen our defenses.
• Implement security monitoring tools to detect and respond to security incidents in real-time. Coordinate incident response efforts, investigate security breaches, and implement corrective actions to prevent future occurrences.
• Assess the security risks associated with new technologies, systems, and processes. Work closely with IT and business teams to identify potential threats and develop strategies to mitigate risks effectively.
• Ensure compliance with relevant security standards and regulations, such as NIST, ISO or CIS. Maintain documentation and evidence of compliance activities for audits and regulatory inspections.
• Coordinate with the Information Security Operations Manager to create new or modify existing technical security documents, playbooks or runbooks.
• Participate in Security Operations activities such as monitoring and triage of security events, intrusion detection, analysis of anomalies, threat hunting, security operation monitoring, and tuning of security systems and tools.
• Monitor, track, and maintain certificates/certificate providers.
• Document security breaches and assess the damage.
• Assist with support of existing systems and/or business requests.
• Detect and respond to cyber security threats to ensure Blaze CU operates securely.
• Identify gaps and propose solutions to increase security efficiency and effectiveness.
• Identify, evaluate, and apply vulnerability remediations or provide recommendations.
• Act as technical security advisor to the institution, members and peers.
• Subscribe to threat notification networks, new regulations and information sharing networks to stay current on requirements and new threats to the industry.
• Build relationships across the organization to ensure efficient use of controls.
• Create a robust network of diverse information security and technical professionals.
• Attend continuing technical security and fraud education appropriate to the position.
• Attend a certain number of company sponsored security training/education classes including the following areas – BSA, AML, OFAC, privacy, safeguarding member information and physical security.
• Advise on best security practices as they relate to information technology resources.
• Participate in the design, configuration & deployment of information security infrastructures.
• Provide secure alternatives to achieve desired business results.
• Offer training on technical controls affecting the security and privacy of member information.

Other Duties

• Comply with applicable laws and regulations, including but not limited to, the Bank Secrecy Act, the Patriot Act, and the Office of Foreign Assets Control
• Exhibit Blaze’s Core Value’s: Better Lives, Thoughtfully Compassionate, Minnesota’s Best, and Give Back
• Regular and predictable attendance
• Perform other duties as assigned to support effective department operation