{"id":3352801,"url":"https://alion.io/job/allegacy-financial-cybersecurity-engineer","title":"Cybersecurity Engineer","company":{"id":1804301,"name":"Allegacy Financial","domain":"allegacy.org","url":"https://alion.io/company/allegacy","size_band":"201-500","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Paylocity","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Winston-Salem, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":75000,"max_usd":143000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":502},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DLP","optional":false},{"name":"DNS","optional":false},{"name":"Linux","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"PCI DSS","optional":false},{"name":"SIEM","optional":false},{"name":"TCP/IP","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-10-27T13:19:02Z","employer_posted_date":"2026-10-27","last_verified_at":"2026-10-29T12:56:03Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":2},"description":"Description\nAt Allegacy, our roots run deep - anchored in a longstanding commitment to doing right by our members and the communities we serve. Every role within our organization plays a vital part in nurturing the relationships that make that promise real. As a member of our team, you'll be empowered to live out our brand every day, building meaningful connections that support the financial wellbeing of those who count on us most.\nRole Accountability\nOur culture is built on teamwork, integrity, and a shared commitment to delivering a trusted member experience. In this role, you will support the Credit Union’s cybersecurity operations with a primary focus on incident response by monitoring for threats, triaging alerts, investigating suspicious activity, coordinating containment and remediation, and partnering with internal teams and our managed detection and response (MDR) provider to reduce risk and improve resilience.\nSpecific Accountabilities\nMonitor security tooling (e.g., SIEM, EDR, email/web security, firewall/VPN logs) and triage alerts to determine scope, severity, and required response actions.\nInvestigate suspicious activity by analyzing logs and telemetry, correlating events across systems, and documenting findings in tickets and incident records.\nExecute incident response actions (containment, eradication, and recovery) in partnership with IT and application teams, including isolating hosts, blocking indicators, and supporting remediation.\nCollect and preserve incident evidence (logs, timelines, indicators) and support forensic activities as needed while maintaining chain-of-custody expectations.\nDevelop, maintain, and improve incident response playbooks and procedures; participate in tabletop exercises and post-incident reviews to drive corrective actions.\nTune detections and reduce false positives by partnering with tool owners; recommend improvements to alert logic, correlation rules, and response automation.\nSupport vulnerability response by validating exposure, tracking remediation, and coordinating patching or mitigating controls for critical findings.\nCoordinate with internal teams and external partners (including our managed detection and response (MDR) provider, technology vendors, and law enforcement as directed) during investigations and response activities.\nImplement and validate security changes that support incident response outcomes (e.g., blocks, access adjustments, segmentation changes) and follow through on hardening items identified during investigations.\nParticipate in an incident response on-call rotation (as required), provide timely escalation and status updates to stakeholders, and support incident communications aligned to severity and business impact.\nLeverage frameworks such as MITRE ATT&CK and perform light threat hunting (hypothesis-driven investigations) to proactively identify malicious activity and validate control effectiveness.\nStay current on the threat landscape, attacker techniques, and incident response best practices; recommend process and control improvements based on lessons learned.\nRequirements\nKnowledge, Skills and Abilities\nStrong problem solving and analytical skills; must possess the ability to make quick decisions and use good judgment during incident response.\nStrong verbal and written communication skills; can clearly and confidently communicate information security concepts to all areas of the business.\nHighly adaptable to a constantly changing business and technology environment.\nFamiliarity with regulatory and legal security standards and requirements relevant to financial services/credit unions such as GLBA, NCUA, FFIEC guidance, PCI DSS, and Sarbanes-Oxley (as applicable).\nHands-on knowledge of incident response practices (triage, investigation, containment/eradication, recovery) and the ability to follow and improve playbooks and procedures.\nAbility to analyze security telemetry (Windows/Linux logs, firewall/VPN logs, DNS, proxy, authentication logs) to identify indicators of compromise and suspicious behavior.\nExperience with security monitoring and detection tools (e.g., SIEM queries/dashboards, endpoint detection and response) and familiarity with alert tuning and correlation concepts.\nKnowledge of Identity and Access Management concepts (MFA, privileged access management) and common investigation points for authentication-related incidents.\nFamiliarity with data protection controls (e.g., DLP) and how to investigate and respond to potential data exposure events.\nKnowledge of risk management processes (e.g., methods for assessing and mitigating risk) and how incidents impact business risk.\nKnowledge of national and international laws, regulations, policies, and ethics as they relate to cybersecurity. \nKnowledge of cyber threats and vulnerabilities. \nKnowledge of specific operational impacts of cybersecurity lapses. \nKnowledge of cybersecurity principles and organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation). \nKnowledge of network traffic analysis concepts (tools, methodologies, processes), including basic packet capture/analysis and web filtering technologies.\nKnowledge of what constitutes a network attack and the relationship to both threats and vulnerabilities. \nWorking knowledge of networking fundamentals used in investigations (TCP/IP, DNS, HTTP/S, routing, VPN concepts) and common attacker techniques in enterprise environments.\nEducation and Experience\nBachelor’s degree in Information Systems, Information Technology, Management Information Systems, Computer Science, Computer Engineering, or related field. \n3-5 years of experience in information security, SOC operations, or incident response, including hands-on investigation and response to security events.\nProfessional certifications preferred: Security+, CySA+, GCIH/GCIA (or similar), or CISSP/CCSP (a plus).","description_format":"text","description_chars":5908,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Incident Response","Credit Unions & Cooperative Banks"],"lifecycle":[{"event":"open","at":"2026-10-27T19:10:07Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":1,"expected_fill_days":30,"reasons":["conf:3","win:early"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/allegacy-financial-cybersecurity-engineer","json_url":"https://alion.io/job/allegacy-financial-cybersecurity-engineer.json","meta":{"generated_at":"2026-10-29T20:10:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":30034,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1804301},"rest":"https://alion.io/mcp/rest/get_company?id=1804301"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fallegacy-financial-cybersecurity-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fallegacy-financial-cybersecurity-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fallegacy-financial-cybersecurity-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/allegacy-financial-cybersecurity-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fallegacy-financial-cybersecurity-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3352801}},{"tool":"search_jobs","arguments":{"company":"allegacy.org","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3352801},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}