Principal Cybersecurity Engineer | Credit Union | Remote

OCCU is a member-owned credit union based in Eugene, Oregon, guided by a clear and meaningful vision: to Enrich Lives. This purpose drives everything we do, from how we serve our members to how we support one another as colleagues. With a strong commitment to community impact, OCCU lives its values of tenacity, humility, and big-heartedness every day.

We are seeking an experienced Principal Cybersecurity Engineer, or Principal Security Engineer, to help strengthen and protect OCCU's technology environment. This is a highly technical, collaborative role working across Technology Services and Information Security to improve our security footprint, protect critical systems, and ensure technology operates securely and reliably.

This position is remote. The salary range for this position is $120,340 - $150,425 annually, depending on experience.

As our Principal Security Engineer, you'll bring deep technical security expertise to the systems and technology that support OCCU. You'll partner closely with Technology Services and Information Security to maintain and strengthen the security of endpoints, servers, networks, software, architecture, and services.

This role combines hands-on security engineering with troubleshooting, systems administration, vulnerability mitigation, security platform implementation, and technical guidance. You'll help ensure security policies are put into practice throughout our environment while staying ahead of evolving cybersecurity threats and technologies.

• →Partner with Technology Services and Information Security to implement security solutions and ensure ongoing patching, maintenance, vulnerability mitigation, and security policy enforcement.
• →Implement approved security solutions across endpoint devices, mobile devices, servers, systems, software, architecture, and services.
• →Respond to findings from security assessments and vulnerability scans, working with internal teams, auditors, regulatory agencies, vendors, and penetration-testing firms to mitigate identified risks.
• →Develop and implement operating systems and network hardening baselines.
• →Participate in the development and implementation of new security platforms and security strategies.
• →Help maintain secure, reliable systems by responding to production incidents and supporting ongoing technology and business-platform needs.
• →Maintain comprehensive technical documentation, including data flows, repositories, and integration points.
• →Provide technical guidance and training to Technology Services team members on security best practices and protocols.
• →Contribute to disaster recovery, business continuity, and OCCU's broader technology strategy.
• →Stay current on emerging cybersecurity threats, trends, technologies, and security practices.

We're looking for someone who combines strong cybersecurity engineering expertise with sound judgment, analytical thinking, and the ability to build trusted partnerships across technical teams.

• Minimum of five years of experience working with computer systems in a technical cybersecurity capacity, with an emphasis on endpoint protection and network security architecture.
• Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27000 series, and CIS Controls.
• Experience working with endpoint protection platforms such as Cisco AMP, CrowdStrike, or Symantec Endpoint Protection.
• Strong knowledge of network security technologies, including firewalls and VPNs.
• Experience with cloud security principles and technologies, such as AWS, Microsoft Azure, or Google Cloud.
• Demonstrated knowledge and experience with Microsoft systems and application technologies.
• Strong troubleshooting, analysis, communication, and interpersonal skills.
• Experience deploying systems, software, and configuration changes, including implementation of rollback plans.
• Experience working with scripting languages and automation tools.
• Experience configuring systems and applications and supporting secure technology solutions.
• Experience working within an ITIL environment, including change control and configuration-management practices.
• GIAC Security Operations Certified.
• System and application monitoring platforms and technologies such as syslog, Splunk, NetFlow, and What's Up Gold.

• Network switching and routing technologies and products, including Cisco and Juniper
• SAN technologies and products such as NetApp and EMC
• VDI technologies
• System and application performance tuning

• Bachelor's degree in Computer Science, Information Technology, Cyber Security Architecture, or a related field.

An equivalent combination of education and experience demonstrating the required knowledge, skills, and abilities may be considered in lieu of the outlined education requirement.