Cyber Security Engineer

At AAA, our Team Members strive to deliver amazing service and help our Members outsmart life’s roadblocks. We believe everything you do outside of work adds to who you are at work. We're working to transform AAA for the next century with a mission to create Members for life by unleashing the innovative spirit of our Team Members.

Why Work For Us?

• Great Pay - opportunity to participate in AAA discretionary annual incentive plan or other incentive plans depending upon position
• 401k Matching – $1 for $1 company match up to 6% of eligible earnings per pay period
• Benefits – Medical, Dental, Vision, wellness program and more!
• Paid Holidays
• Paid Time Off – Team Members accrue paid time off monthly. Depending on position, an additional 24 hours per year are earmarked for volunteer activities.
• Collaborative Environment – AAA will value your contribution to providing exceptional service to our members
• Free AAA Classic Membership
• AAA Product Discounts
• Tuition Reimbursement Program

NOTE: This role is hybrid and requires 2 days a week in our Phoenix, AZ office or our San Francisco Bay Area office.

Job Summary

The Cyber Security Engineer role is responsible for leading projects to design, implement, and enhance cyber security controls to protect the large, complex IT environment at Mountain West Group. The Cyber Security Engineer is proficient in all aspects of information security, provides ongoing support and mentoring to more junior team members, and fulfills routine cybersecurity tasks. Reporting to the Director, Cyber Security and Network Engineering, this role includes testing the effectiveness of security controls and advising business partners on general cybersecurity topics.

Responsibilities / Job Duties

• Respond to cybersecurity related requests and take appropriate action, including approving, fulfilling, or rejecting requests and working with business partners to meet their needs.
• Manage and maintain cybersecurity tools including patches and onboarding/offboarding.
• Manage projects, initiatives, and changes, including planning, scheduling, implementation, and reporting of status.
• Audit controls such as firewall rules, cloud and SaaS security configurations, and API controls, and recommend improvements.
• Work with application, cloud, and infrastructure teams to detect and remediate vulnerabilities in configurations and in-house developed software.
• Conduct periodic testing of security controls to evaluate effectiveness and recommend improvements, and establish and collect risk-based metrics.
• Assist with development of security requirements and assessment procedures for business use of technologies.
• Other duties as assigned by the Director, Cyber Security and Network Engineering.

Knowledge, Skills, And Abilities

• Ability to lead individual projects
• Strong oral and written communication skills
• Act as a team player
• Act with a sense of urgency to resolve requests
• Ability to weigh whether a request is reasonable before filling it

EDUCATION, COMPETENCIES, CERTIFICATIONS/LICENSES

• Minimum Qualifications
• Bachelor’s Degree in information technology or related field, or equivalent work experience and education.
• 5 years of experience in information technology field
• 4-7 years of cybersecurity experience.
• At least one year of experience in one or two application of core security concepts: Security Operations and Administrations, Access Controls, Risk identification, Monitoring, and Analysis, Incident Response and Recovery, Cryptography, Network and Communications Security, Systems and Application Security.
• Information or Cyber Security Certification.
• Preferred Qualifications
• 2 years project management experience.
• Certified Information Systems Security Professional (CISSP) or Certified Cloud Security Professional (CCSP).