What are the responsibilities and job description for the IT Security Engineer position at Virginia Credit Union?
Job Description : PRIMARY FUNCTION :
The Security Engineer provides technical leadership in designing, engineering, testing, and deploying security architectures, configurations, and controls to meet VACU security needs. This role ensures secure design of VACU's computer systems, infrastructure, and network connections. Maintains security best practices and solutions while possessing an understanding of risk and compliance. Identifies security measures to maintain security and privacy compliance. This position will analyze and resolve security breaches and vulnerability issues in a timely and accurate fashion, and conduct user activity audits where required. Individual will be responsible for the implementation and daily monitoring of information security controls and work with the Information Technology staff and the Information Security Analyst to assess system security.
JOB DUTIES AND RESPONSIBILITIES :
- Ensure high-level integration of IT Systems development with security policies and information protection strategies
- Deploy, manage and maintain all security systems and their corresponding or associated software, including firewalls, intrusion detection systems, and cryptography systems.
- Conduct security reviews, evaluations, risk assessments, and develops recommendations for improvements as appropriate
- Monitor and evaluate emerging security alerts / issues, recommend remediation alternatives
- Design, perform, and / or oversee penetration testing of all systems in order to identify system and application vulnerabilities.
- Monitor server logs, firewall logs, intrusion detection logs, and network traffic for unusual or suspicious activity
- Coordinates information protection activities and projects with other groups within VACU, business partners, vendors of information protection services, and other organizations to ensure effective definition, development, and implementation of appropriate information protection measures
- Recommend, schedule (where appropriate), and guide recovery procedures, and any other measures required in the event of a information technology security incident
- Assist VACU's Information Security Analyst and Information Technology management in the development and implementation of appropriate security controls to maintain compliance with security and / or privacy regulations.
- Acts as team member in the development, maintenance and testing of the Business Resumption plan (as it relates to Information Systems Security).
- Conduct research on emerging products, services, protocols, and standards in support of security enhancement and development efforts.
- Effectively plan and manage assigned activities to ensure that objectives and schedules are met.
- Other duties may be required and assigned by the supervisor
- Complete all required BSA and OFAC training. Report all suspicious activity to Security.
- Assist in development and management of the IT Budget
JOB QUALIFICATIONS : Knowledge :
Skills : Abilities :
Minimum Education and Experience :
PHYSICAL REQUIREMENTS :
