The posting
OCCU is a member-owned credit union based in Eugene, Oregon, guided by a clear and meaningful vision: to Enrich Lives. This purpose drives everything we do, from how we serve our members to how we support one another as colleagues. With a strong commitment to community impact, OCCU lives its values of tenacity, humility, and big-heartedness every day.
We are seeking an experienced Principal Cybersecurity Engineer, or Principal Security Engineer, to help strengthen and protect OCCU's technology environment. This is a highly technical, collaborative role working across Technology Services and Information Security to improve our security footprint, protect critical systems, and ensure technology operates securely and reliably.
This position is remote. The salary range for this position is $120,340 - $150,425 annually, depending on experience. Candidates may need to be available to work Pacific Time hours based on business needs. Finalists may be asked to attend an in-person, on-site interview in Eugene, Oregon, with travel expenses reimbursed.
About the Role:
As our Principal Security Engineer, you'll bring deep technical security expertise to the systems and technology that support OCCU. You'll partner closely with Technology Services and Information Security to maintain and strengthen the security of endpoints, servers, networks, software, architecture, and services.
This role combines hands-on security engineering with troubleshooting, systems administration, vulnerability mitigation, security platform implementation, and technical guidance. You'll help ensure security policies are put into practice throughout our environment while staying ahead of evolving cybersecurity threats and technologies.
Key Responsibilities:
- Partner with Technology Services and Information Security to implement security solutions and ensure ongoing patching, maintenance, vulnerability mitigation, and security policy enforcement.
- Implement approved security solutions across endpoint devices, mobile devices, servers, systems, software, architecture, and services.
- Respond to findings from security assessments and vulnerability scans, working with internal teams, auditors, regulatory agencies, vendors, and penetration-testing firms to mitigate identified risks.
- Develop and implement operating systems and network hardening baselines.
- Participate in the development and implementation of new security platforms and security strategies.
- Help maintain secure, reliable systems by responding to production incidents and supporting ongoing technology and business-platform needs.
- Maintain comprehensive technical documentation, including data flows, repositories, and integration points.
- Provide technical guidance and training to Technology Services team members on security best practices and protocols.
- Contribute to disaster recovery, business continuity, and OCCU's broader technology strategy.
- Stay current on emerging cybersecurity threats, trends, technologies, and security practices.
What We're Looking For:
We're looking for someone who combines strong cybersecurity engineering expertise with sound judgment, analytical thinking, and the ability to build trusted partnerships across technical teams.
Required qualifications include:
- Minimum of five years of experience working with computer systems in a technical cybersecurity capacity, with an emphasis on endpoint protection and network security architecture.
- Strong knowledge of cybersecurity frameworks and standards, including NIST, ISO 27000 series, and CIS Controls.
- Experience working with endpoint protection platforms such as Cisco AMP, CrowdStrike, or Symantec Endpoint Protection.
- Strong knowledge of network security technologies, including firewalls and VPNs.
- Experience with cloud security principles and technologies, such as AWS, Microsoft Azure, or Google Cloud.
- Demonstrated knowledge and experience with Microsoft systems and application technologies.
- Strong troubleshooting, analysis, communication, and interpersonal skills.
- Experience deploying systems, software, and configuration changes, including implementation of rollback plans.
- Experience working with scripting languages and automation tools.
- Experience configuring systems and applications and supporting secure technology solutions.
- Experience working within an ITIL environment, including change control and configuration-management practices.
- GIAC Security Operations Certified.
- System and application monitoring platforms and technologies such as syslog, Splunk, NetFlow, and What's Up Gold.
Preferred Skills:
- Network switching and routing technologies and products, including Cisco and Juniper
- SAN technologies and products such as NetApp and EMC
- VDI technologies
- System and application performance tuning
Education & Certification:
- Bachelor's degree in Computer Science, Information Technology, Cyber Security Architecture, or a related field.
An equivalent combination of education and experience demonstrating the required knowledge, skills, and abilities may be considered in lieu of the outlined education requirement.
Why Join OCCU:
OCCU offers a comprehensive compensation and benefits package designed to support your well-being and professional growth, including:
- Low-cost medical, dental, and vision insurance
- 401(k) retirement plan with employer match
- Paid time off plus 13 paid holidays
- Tuition reimbursement for eligible education and training
- Company-paid long-term disability
- 40 hours of company-paid core time annually for full-time employees to participate in community volunteer opportunities
OCCU is an Equal Opportunity Employer and welcomes applications from all qualified candidates. If you're an experienced security engineer who enjoys solving complex technical challenges, strengthening systems, and collaborating across teams to build a more secure technology environment, we encourage you to apply.
