Security Engineer

Security Engineer

Sunwest Bank

Design and support secure infrastructure across cloud and on‑prem environments while managing key security tools and processes. This role focuses on integrating security into development workflows, responding to incidents, and driving automation to improve efficiency. Success in this position requires strong scripting skills, a collaborative mindset, and a solid understanding of modern security practices and compliance standards.

• Engineer and sustain a hybrid‑security architecture that protects on‑premises infrastructure, Microsoft Azure services, and Microsoft
  365, ensuring high availability and documented secure baselines.
• Serve as the primary security‑engineering liaison to the managed SOC, refining detection logic, tuning alert thresholds, and providing Tier‑3 escalation support for complex incidents.
• Administer and optimize core security platforms including endpoint protection, network detection, email/web filtering, firewalls, VPN, and backup/DR systems.
• Embed Dev Sec Ops  controls into CI/CD pipelines (Azure Dev Ops), integrating SAST, DAST, secret‑scanning, IaC checks, and policy gate reviews; facilitate threat modeling and enforce secure‑code standards with development teams.
• Run the vulnerability‑management program: schedule scans, validate and risk‑rank findings, drive remediation with system owners, and report key metrics to the CISO.
• Govern identity and privileged access across on‑prem Active Directory and Microsoft Entra  (Azure AD); enforce least‑privilege roles, MFA, periodic entitlement reviews, and break‑glass account processes.
• Administer enterprise Data Loss Prevention (DLP) and information‑protection controls for Microsoft Purview/M365, endpoints, and web gateways by defining policies and tuning detectors.
• Manage encryption and certificate services, including PKI, TLS endpoint configuration, and key‑vault operations, ensuring timely renewal and compliance with regulatory standards.
• Automate and document security workflows using Power Shell, Python, or Terraform (e.g., configuration drift checks, compliance evidence collection) to reduce manual effort and improve consistency.
• Contribute to incident‑response readiness by maintaining runbooks, participating in tabletop exercises, and coordinating post‑incident root‑cause analysis and lessons learned.
• Develop and maintain security policies, standards, and procedures aligned to NIST CSF, FFIEC, and FDIC guidance; provide audit evidence and executive‑level control‑effectiveness reporting.
• Collaborate with IT teams to ensure security is integrated into all infrastructure and application deployments.

• Demonstrate high degree of professionalism in communication, attitude, and teamwork with customers, peers, and management.
• Work independently with minimal supervision.
• Manage multiple IT projects simultaneously in a dynamic environment.
• Maintain high quality work, attendance, and appearance.
• Adhere to all company policies & procedures, safety regulations, and local, state, and federal laws.
• Comply with regulations governing financial institutions, including BSA/AML/CIP, Consumer Privacy, Regulation CC, Information Security, Bank Protection Act, FACT‑Identity Theft, IT, and GLBA.
• Attend required training and maintain a basic knowledge of procedures for compliance.
• Perform additional duties as assigned related to the position.

• Bachelor’s degree in computer science or information systems.
• 5+ years equivalent experience.

• Adaptability
• Communication
• Decision Making
• Initiative
• Innovation
• Motivator
• Organization
• Professionalism
• Results‑Oriented

• Standing, walking, and squatting less than 50% of the shift.
• Required to lift, move, and carry up to 40 pounds.
• Ability to read, count, and write to accurately complete all documentation and reports.
• Must see, hear, and speak to communicate with employees and other customers.
• Require close, distance, peripheral, and depth vision; ability to adjust focus.
• Manual dexterity required using hands to finger, handle, feel, type, and reach with hands and arms.
• Sedentary, moderate, or light activity as described in the job description.

• Workspace is clean, orderly, well‑lit, and ventilated with proper safety compliance.
• Noise levels are moderate.

Sunwest Bank is an Equal Opportunity Employer. Sunwest Bank works with staff members and customers without regard to race, ancestry, national origin, sex, marital status, age, religion, medical condition, handicap, disability, or veteran status and to assist the Bank in maintaining its affirmative action program. Compliance with Bank Secrecy Act laws and regulations is extremely serious; employees are expected to fully comply with Sunwest Bank’s “Code of Ethics and Conduct.”

All job descriptions can be amended without notice as warranted by business necessity.