Security Engineer

Why should you join our team?

American AgCredit offers a unique opportunity to be a part of a national financial system supporting those who feed, clothe and fuel the world. We are a growing organization embracing collaboration and innovation while delivering transformative solutions. American AgCredit provides a cultivating environment where you truly make a difference for our customers and teams.

Benefits offered by American AgCredit:

• Commitment to agriculture and the communities we serve
• Family friendly work environment
• Investment in employee development
• Medical, Dental and Vision coverage
• Outstanding 401k – automatic 3% employer contribution, plus match up to 6%
• Generous Paid Time Off (Vacation accrued at 21 days annually, Sick Days accrued at 15 days annually, 12 paid holidays, plus 16 hours of volunteer time)
• Competitive Incentive Compensation Plan
• Disability & Life Insurance
• Employee mental, physical, and financial wellness programs
• The position is bonus eligible based on association and personal performance

Position will be posted until filled.

The Security Engineer is responsible for the operation, administration, optimization, and support of the Association's information security platforms and services. As a member of the Security Operations team, this role performs hands-on security engineering and operations activities designed to identify, investigate, respond to, and remediate cybersecurity threats, vulnerabilities, and exposures.

This position has a primary focus on Vulnerability Management and is responsible for vulnerability assessment, exposure discovery, technical validation, risk-based prioritization, remediation coordination, and issue tracking through resolution. The Security Engineer works closely with infrastructure, application, cloud, endpoint, and other technology teams to ensure vulnerabilities and exposures are identified, understood, and addressed in accordance with established remediation timelines.

In addition to vulnerability management, this role supports security monitoring, incident response, threat hunting, cloud and endpoint security, detection tuning, and security automation. The Security Engineer investigates security events, evaluates control gaps, improves technical controls, and maintains the platforms, integrations, automation, reporting, and processes necessary to protect Association systems and data.

Strong collaboration and communication skills are essential. This role works with technology teams, managed security service providers, vendors, and internal stakeholders to investigate security concerns, provide practical remediation guidance, reduce risk, and improve security operations.

ESSENTIAL DUTIES

• Administer, optimize, and support enterprise security platforms used for vulnerability management, threat detection, endpoint security, cloud security, identity protection, email security, and related security operations.
• Perform and coordinate vulnerability management activities across endpoint, server, application, cloud, network, and internet-facing environments. Identify, validate, prioritize, and drive remediation of vulnerabilities and exposures using risk-based methodologies that consider exploitability, business impact, asset criticality, threat intelligence, and remediation objectives.
• Assess system configurations, security controls, and technology implementations to identify security weaknesses, potential attack paths, and control gaps. Provide technical guidance and remediation recommendations to support secure deployment and operation of Association technologies.
• Monitor security telemetry, threat intelligence, vulnerability disclosures, and attack activity to identify emerging threats. Conduct threat hunting activities and improve detection capabilities to increase security visibility and reduce organizational risk.
• Investigate and respond to cybersecurity incidents, suspicious activity, and security events. Collaborate with technology teams, managed security service providers, and technology vendors to contain threats, resolve issues, and improve defensive capabilities.
• Develop, evaluate, and enhance security tools, automation, integrations, reporting, dashboards, controls, and operational workflows to improve efficiency, increase visibility, reduce manual effort, and support data-driven security operations.
• Develop and maintain operational documentation, procedures, technical runbooks, and knowledge articles that support consistent execution of security operations and vulnerability management activities.
• Evaluate and recommend improvements to security tools, processes, controls, and operational practices.
• Participate in after-hours security incident response activities when necessary.
• Perform other duties as assigned.

LEVELS OF SUPERVISION EXERCISED AND RECEIVED

Exercises no direct supervision. Works under the general direction of the Head of Cybersecurity. Regularly provides technical guidance to technology teams regarding security operations, vulnerability remediation, exposure reduction, and implementation of security controls. Exercises independent judgment in the investigation, analysis, prioritization, and resolution of information security issues.

TYPICAL EDUCATION AND EXPERIENCE

• Bachelor's degree in Computer Science, Information Systems, Cybersecurity, or a related field; or an equivalent combination of education, technical training, certifications, military service, and professional experience that demonstrates the knowledge and skills required to perform the responsibilities of the position.
• Minimum of 5 years of hands-on experience supporting, administering, troubleshooting, engineering, or securing enterprise technology environments. Experience may be gained through information technology, infrastructure administration, systems administration, cloud administration, endpoint administration, network administration, cybersecurity, security operations, security engineering, or related technical disciplines.
• Experience with vulnerability management, security operations, infrastructure operations, cloud administration, endpoint management, systems administration, network administration, or security engineering is preferred, along with familiarity with vulnerability management principles, secure configuration practices, security frameworks, and risk-based prioritization methodologies.
• Strong technical aptitude with experience supporting enterprise technology environments, investigating complex technical issues, working across technology teams, and driving solutions through resolution. Demonstrates analytical thinking, continuous learning, and an interest in cybersecurity and risk reduction.
• Experience with enterprise technology, security platforms, scripting, automation, reporting, or workflow improvement is preferred.
• Familiarity with industry security frameworks and standards, including NIST Cybersecurity Framework, CIS Controls and Benchhmarks
• Relevant technical or security certifications are preferred.
• Occasional travel required (<10%).

PREFERRED CANDIDATE PROFILE

The ideal candidate has a strong hands-on technology foundation, a passion for cybersecurity, and experience solving complex problems in enterprise environments. Candidates may come from infrastructure, systems administration, cloud, endpoint, network, security operations, security engineering, or other technical backgrounds.

The successful candidate is naturally curious, communicates effectively, and works well across technology teams to understand issues, identify root causes, and drive practical solutions through resolution. Direct experience with vulnerability management or security operations is valuable, but technical aptitude, sound judgment, continuous learning, and the ability to translate findings into actionable remediation guidance are equally important.

ESSENTIAL JOB REQUIREMENTS:

Must have the ability to perform basic office tasks and sit at a desk for an extended period of time. Job requires extensive use of computers and phones. While performing the job, the employee is required to sit, crouch, kneel, crawl, reach and have the ability to lift up to 40 pounds. Ability to work with typical hardware and cabling practices required. Must have strong written and verbal communication skills to adequately convey ideas and work well with a team. Ability to talk and hear, sit and use their hands and fingers, and reach in all directions is essential in performance of the job. Must be able to interact effectively with people at all levels of company. Work during established business hours and may require occasional weekend and/or evening work.

FULL-TIME REMOTE: These roles and job functions can be done remotely, while maintaining our strong commitment to customer service and our business goals. Employees are welcome to come to an office to work if needed, and some travel for team meetings will be required.

PAY RANGE:

Minimum $96,484.38 - Max $164,023.43 Annual #LI-REMOTE

All hiring is contingent on eligibility to work in the United States. We are unable to sponsor or transfer visas for applicants.