Senior Security Engineer

About Patelco Credit Union
Patelco Credit Union is a not-for-profit credit union with a purpose to build financial health and wellbeing for our members. Since 1936, Patelco has grown from $500 in assets to over $9 billion in assets and is the 7th largest credit union in California with branches throughout Northern California.

We are here for our members throughout all their stages of life. Meeting them with the products and services to help them plan purposefully for their futures and to secure our life-long partnership as their trusted financial advocate. As one team, we are all committed to delivering service, empowering financial literacy, creating products, and providing new technology for our members.

We believe that work should be rewarding, challenging, and enjoyable. We're dedicated to creating a positive and supportive culture where our team members can thrive. If you're looking to use your skills and knowledge to make a difference in our members' lives, Patelco could be the perfect fit for you.

Overview
Patelco's Sr. Security Engineer (Detection Engineering) will be leading the design, tuning and optimization of the Credit Union's detection stack, helpful for safeguarding our networks and member data. This role is deeply technical and cross-functional, responsible for designing, implementing, and ensuring control effectiveness of system security, information security controls, and processes to protect Patelco data, infrastructure and applications. The role is responsible for care and feeding of detection platforms (e.g. EDR, NDR), SIEM engineering, and SOAR automation and will apply Threat Intelligence, Security Architecture, and adversary simulation knowledge to mature our detection capabilities in alignment with the NIST CSF.

Responsibilities
Essential Duties

• Own the engineering and tuning of endpoint detection & response, network detection & response platforms
• Drive advancement and growth of detection and automation initiatives
• Build, test, and deploy behavioral detections solutions aligned to MITRE ATT&CK TTPs
• Continuously improve detection efficacy using business context and real-world feedback
• Engineer and optimize detection pipelines in SIEM
• Author comprehensive runbooks, write automation scripts, and build SOAR capabilities to improve response times
• Build and maintain enrichment workflows and automated response playbooks using SOAR
• Create, maintain and manage a library of automated playbooks to address new threats and tactics employed by attackers
• Ensure telemetry normalization, parsing and alert fidelity across data sources
• Operationalize threat intelligence into actionable detection rules, dashboards, and response workflows.
• Lead red/blue teaming efforts to test detections against real-world scenarios.
• Integrate external and internal threat feeds to strengthen signal correlation
• Apply STRIDE & DREAD methodologies to model risks associated with applications, systems and emerging threats
• Recommend and document compensating controls for identified risks
• Partner closely with Security Operations, Governance Risk & Compliance (GRC), and wider Engineering teams to enhance detection coverage
• Document information security design and architecture
• Mentor and cross-train staff members in the areas of subject matter expertise
• Provide engineering support to Technology Operations implementing industry standard benchmarks and evaluation activities
• Other duties as assigned

Functional Competencies

• Strong knowledge of the Cyber Threat landscape and ability to articulate and incorporate understanding of major threat categories, motivations and intent of adversaries
• Demonstrated knowledge and practical application of MITRE ATT&CK
• Experience in at least one programming language (Python, Go, C, C++) or deep expertise using low-code automation tools or SOAR Platforms
• Experience building and scaling observability solutions
• Experience with Adversary emulation, continuous detection improvement and operational excellence
• Must be able to collaborate with other teams
• Clear verbal and written communication will be required

Qualifications
Minimum Qualifications

• 5+ years Information Security with 3+ years focused on Detection Engineering, including EDR, NDR, SIEM, SOAR tooling
• Demonstrated knowledge and practical application of MITRE ATT&CK, STRIDE & DREAD models
• Strong scripting skills (Python, YAML etc.) and experience with data parsing and log normalization
• Industry certifications such as CISSP, GCTI, GCIA, GDSA or equivalent preferred

Physical Activities/Requirements

• This is a hybrid role based out of our Dublin HQ

Target Base Pay
$115,548 - $144,435/year

Compensation At Patelco
Please note that the salary information is a general guideline only. Patelco Credit Union considers factors such as (but not limited to) scope and responsibilities of the position, candidate's work experience, education/training, key skills, internal peer equity, as well as market and business considerations when extending an offer. We offer a competitive total rewards package including a wide range of medical, dental, vision, financial, and other benefits

We Offer
Physical Health:

• Exceptional Medical, Dental, Vision, and Life Insurance benefits
• Onsite fitness center at HQ and rewards for completing wellness related activities

Financial Health:

• Competitive compensation packages with bonus opportunity
• 401(k) with 3% Safe Harbor and 5% employer match
• Discounts on loan products
• Tuition reimbursement

Emotional Health:

• Employee Assistance Program (EAP)
• PTO for part-time and full-time positions
• Paid holidays

Personal Development:

• On-the-job training and skills development
• Internal transfer opportunities for career growth
• Volunteer work

Flexible work arrangements available for specific positions

Patelco Credit Union is an Equal Opportunity Employer including individuals with disabilities and protected veterans

IND123