Information Security Engineer

At Affinity Plus every employee understands how their work affects our members experience and we strive to provide an experience that can't be found anywhere else. Great service starts with great employees and that is why we focus on providing not only the best place our members will ever bank but the best place our employees will ever work. Between our one of a kind culture, incredible benefits, and work/life balance; we believe you will feel the Affinity Plus difference. Position Summary The Information Security Engineer plays a key role in protecting Affinity Plus Federal Credit Union from cybersecurity threats by designing, implementing, managing, and continuously improving the technologies and controls that support the Information Security Program. This position is responsible for maintaining and enhancing security infrastructure, supporting threat detection and response capabilities, conducting security assessments, and collaborating with internal teams and external partners to strengthen the organization's security posture. The role serves as a technical subject matter expert and helps ensure security systems, processes, and defenses are effective against current and emerging threats while supporting the confidentiality, integrity, and availability of corporate data and resources. Duties & Responsibilities Security Engineering & Infrastructure Management

• Serve as a key resource in the evaluation, selection, implementation, configuration, and ongoing management of information security tools, technologies, and platforms.
• Maintain, support, and optimize the security infrastructure and technologies utilized by the Information Security Program.
• Collaborate with technology teams to ensure security solutions are effectively integrated, configured, and maintained across the enterprise.
• Evaluate existing security controls and recommend enhancements to improve operational effectiveness, efficiency, and security posture.
• Lead the implementation and lifecycle management of security technologies, ensuring solutions remain current, supported, and aligned with organizational needs.

Threat Management, Detection & Response

• Collaborate with Information Security team members to develop, maintain, and continuously enhance Security Information and Event Management (SIEM) capabilities and detection strategies.
• Coordinate with threat intelligence sharing organizations and security partners to facilitate the collection, analysis, and sharing of relevant threat intelligence.
• Conduct threat intelligence, threat hunting, and reconnaissance activities to identify emerging threats, assess risks, and improve organizational preparedness and response capabilities.
• Monitor and evaluate threat intelligence information to identify potential impacts to the organization and recommend appropriate mitigation strategies.
• Act as a technical resource during the investigation, analysis, and response to security events and incidents.
• Develop and maintain detection use cases, correlation rules, alerts, and dashboards to improve visibility into potential security threats and suspicious activity.

Vulnerability Management & Security Assessments

• Ensure internal and external vulnerability assessments, attack surface reviews, scans, and security testing activities are conducted regularly.
• Analyze assessment results and collaborate with stakeholders to prioritize remediation efforts and reduce organizational risk.
• Partner with third-party security providers and internal teams to support penetration tests, security assessments, tabletop exercises, audits, and related testing activities.
• Validate remediation efforts and verify identified vulnerabilities have been appropriately addressed.

Security Strategy, Governance & Continuous Improvement

• Assist in the development, implementation, maintenance, and communication of enterprise-wide information security strategies, standards, procedures, and policies.
• Provide technical expertise and recommendations to support strategic security initiatives and program enhancements.
• Research emerging technologies, security trends, vulnerabilities, and threat landscapes to support the continuous improvement of the Information Security Program.
• Collaborate with Information Technology, business stakeholders, and security partners to strengthen organizational cybersecurity capabilities.

Security Consulting & Collaboration

• Serve as a technical subject matter expert for information security technologies, controls, and best practices.
• Partner with internal teams to provide security guidance and recommendations for projects, operational initiatives, and technology implementations.
• Support awareness and education efforts by sharing technical security knowledge and best practices with stakeholders across the organization.
• Build and maintain productive relationships with internal teams, vendors, industry groups, and external security partners.
• Other duties as assigned

Minimum Qualifications and Skills Required Knowledge

• 3+ years of experience in an Information Security role.
• Intermediate experience in Network Administration/Architecture, Security Framework Usage, SIEM Usage.
• Extensive experience in a range of threat intel/recon tools, including propriety and open source models.
• Strong understanding of security theories including Defense-In-Depth, Cyber KillChain, Assumed Breach, Zero Trust.
• Ability to initiate, react to, and take direction on specific course or response, action, and mitigation that is heavily dependent and individualized to the security situation.

Qualifications and Skills Decision Making/Problem Solving/Advising

• Ability to analyze information to solve issues and make informed, sound decisions, within established policies and procedures
• Skilled in assessing needs, offering solutions, and building trust through effective consultation.
• Ability to recognize operational inefficiencies and identify improvement opportunities

Collaboration/Building Relationships

• Proven ability to build and maintain positive working relationships with members and internal stakeholders by demonstrating professionalism, reliability, and responsiveness in daily interactions.
• Ability to collaborate effectively within and across teams.

Accountability • Ability to take accountability of responsibilities, commitments, and outcomes. Communication • Strong ability to communicate clearly, effectively and professionally. Learning

• Ability to actively pursue opportunities to expand knowledge and skills; applying learning to improve performance.
• Willingness to learn new skills, processes, and technologies with support and training.

Adaptability

• Demonstrated adaptability and willingness to take on new responsibilities.
• Demonstrated ability to show resilience and adaptability in the face of challenges or changes.
• Technology Experience
• Intermediate computer and technology skills and knowledge, with the ability to navigate between multiple systems with ease.

Other Skills

• Time Management skills and the ability to prioritize workload based on department and member needs.
• Ability to complete tasks with accuracy and thoroughness.
• Demonstrated reliability, integrity, and ability to maintain confidentiality.

Preferred

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Math, or similar field.
• Certification in CISSP, GCTI, CTIA, CASP+ or equivalent.

Location and Work Environment This role is: Virtual First - Requires reliable internet access and home office setup. Onsite work will be required throughout the year for training, team meetings and events; typically in or near St. Paul, MN . Applicants should live in Minnesota or Wisconsin or within a reasonable commuting distance to the metro area. Physical Requirements

• Sitting 90-95% and standing 5-10%.
• Working at a computer 98% of the day.
• Repetitive movements, including but not limited to typing, mousing, phones, etc.
• May require to lift, carry, push or pull up to 30 pounds.
• Bending, twisting, kneeling, stooping, or crouching on occasion.

Requires onsite presence based on coordination of work with other employees and/or departments. May require travel to attend on-site meetings/events for collaboration, connection, project work, All-Employee Day, etc. Required Work Schedule Standard Monday through Friday business hours with a willingness to work a flexible schedule as needed. Consistent and reliable attendance is a required essential function of this role to meet the needs of the department/team and organization. Compensation This position has a starting pay range of $92,700 - $120,500 annually. In alignment with our commitment to pay transparency, we are providing a good-faith estimate of the pay range for this position. This range reflects what we anticipate offering a successful candidate based on factors such as the role's responsibilities, required qualifications, and relevant experience. The actual pay may vary depending on the selected candidate's skills, experience, and other qualifications. Total Rewards Affinity Plus offers a comprehensive Total Rewards package that goes beyond base pay. In partnership with the State of MN Employer Group, Affinity Plus provides low-cost medical, dental and vision insurance coverage options. Additionally, Affinity Plus frontloads all sick time hours and a portion of vacation hours for all new employees, offers a variety of paid leave options, a monthly wellness benefit, and immediate 401K matching up to 5%. Our Total Rewards philosophy is designed to support your well-being and growth while fostering a fair and inclusive workplace. Disclaimer Applicants may be subject to a background and credit check. Employees in this position must be able to satisfactorily perform the essential functions of the position. If requested, Affinity Plus Federal Credit Union will make every effort to provide reasonable accommodations to enable employees with disabilities to perform the position's essential job duties. As markets change and the Organization grows, job descriptions may change over time as requirements and employee skill levels evolve. With this understanding, Affinity Plus Federal Credit Union retains the right to change or assign other duties to this position. Application Deadline Affinity Plus Federal Credit Union accepts applications on a rolling basis. Equal Opportunity Employer/Protected Veterans/Individuals with Disabilities This employer is required to notify all applicants of their rights pursuant to federal employment laws. For further information, please review the Know Your Rights notice from the Department of Labor. Affinity Plus