Technical Engineer Security

Empowered to live. Inspired to work.
Compeer Financial is a member-owned cooperative located in Illinois, Minnesota and Wisconsin. We bring together team members with a variety of backgrounds and experiences to help provide financial services to support agriculture and rural communities. Join us in a culture that not only promotes meaningful work and professional development, but provides a flexible, hybrid work environment and excellent benefits, which empower you to thrive both personally and professionally.

How we support you:

• Hybrid model - up to 50% work from home
• Flexible schedules including ample flexibility in the summer months
• Up to 9% towards 401k (3% fixed Compeer contribution plus up to 6% match)
• Benefits: medical, dental, vision, HSA/FSA, life & AD&D insurance, short-term and long-term disability, wellness program & EAP
• Vacation, sick leave, holidays/floating holidays, parental leave, and volunteer paid time off
• Learning and development programs
• Mentorship programs
• Cross-functional committee opportunities (i.e. Inclusion Council, emerging professional groups, etc.)
• Professional membership/certification reimbursement and more!

Casual/seasonal & intern team members are not eligible for benefits except for state-mandated programs.

To learn more about Compeer Financial

This position offers a hybrid work option up to 50% remote and is open to Mankato, MN;
Lakeville, MN;
Sun Prairie, WI or Bloomington, IL office location.

The contributions you will make:

This position is responsible for detecting, analyzing, and responding to security threats across the enterprise. This role focuses on operational security execution reducing threat dwell time, improving detection fidelity and ensuring effective incident response and recovery. Focuses on security monitoring, incident response, and threat intelligence activities following established processes and runbooks. Collaborates closely with DT&I, SRM, product teams, and external partners to coordinate response efforts and continuously improve security operations capabilities.

A typical day:

Security Monitoring and Detection

• Monitors enterprise security telemetry across endpoints, identities, networks, and cloud environments using SIEM, EDR/XDR, and related tools.
• Analyzes and investigates security alerts to determine severity, scope, and business impact.
• Tunes detection logic to improve alert fidelity and reduce false positives.
• Validates that security controls are functioning as designed through operational monitoring

Incident Response and Investigation

• Participates in security incident triage, containment, eradication, and recovery activities.
• Supports coordinated incident response efforts with infrastructure, application, and business teams.
• Performs technical investigations to determine root cause, attack path, and impact.
• Produces clear incident documentation, including timelines, findings, and remediation recommendations.
• Supports post-incident reviews and lessons learned to improve

Threat Intelligence and Adversary Analysis

• Consumes and operationalizes threat intelligence, indicators of compromise (IOCs), and adversary tactics, techniques, and procedures (TTPs).
• Maps observed activity to frameworks such as MITRE ATT&CK.
• Proactively hunts for threats using intelligence-driven hypotheses.
• Shares actionable intelligence with stakeholders to improve defensive posture.

Security Automation and Operational Enablement

• Executes and maintain SOAR playbooks for alert enrichment, investigation, and response.
• Automates repeatable Sec Ops workflows to improve speed and consistency.
• Executes and maintains runbooks and response procedures.
• Partners with engineering teams to integrate telemetry and response capabilities.

Operational Metrics, Governance and Compliance

• Tracks and reports key operational security metrics (e.g., MTTD, MTTR, alert volumes, response outcomes).
• Provides evidence and documentation to support regulatory, audit, and compliance requirements related to monitoring and incident response.
• Supports continuous improvement initiatives for Sec Ops processes and tooling.

Vulnerability and Exposure Coordination

• Supports vulnerability management operations by validating…