Senior Security Engineer

POSITION OVERVIEW

Starting wage is based on a number of factors including but not limited to the position being offered location education training and/or experience. Construction Resources offers additional competitive and non-financial benefits.
The Senior Security Engineer will be responsible for designing implementing and maintaining a security program including risk management processes and security measures that protect the companys systems networks and data. The Senior Security Engineer will work closely with other I/T and security professionals to ensure that the organizations digital assets are secure and compliant with relevant regulations.

Key Performance Indicators:
Design Implement and maintain an Information Security Program
Lead or participate in Incident Response for cyber incidents
Vulnerability Management
Security Compliance
Security Awareness Training
Risk Management
Identity and Access Management
Cloud Security
Continuous Improvement of Security Posture
Responsibilities:
Design and implement secure architecture for applications and infrastructure (on-premises and in the cloud)
Develop and maintain security policies standards and guidelines.
Work with enterprise systems team to develop and implement code scanning into the CI/CD pipelines.
Implement vulnerability security testing tools and frameworks.
Conduct threat modeling and risk assessments.
Assist in assessing readiness and in passing compliance audits for applicable data protection laws and regulations (i.e. PCI-DSS)
Assess gaps in security practices and propose appropriate solutions.
Collaborate with development operations and IT teamsIT teams to promote security best practices including service level agreements availability continuity system performance system security documentation technology adoption and planning.
Advocate for security within the organization
Participate in the preparation and execution of cyber security incident response plans exercises and events.
Assist in preparing and exercising resilience incident response business continuity and disaster recovery plans.
Support Security Awareness Pprogram
Manage annual third-party penetration testing and findings to remediation
Build and participate in a third-party risk management program. Perform vendor and partnerPartner risk assessments
Perform security audits on applications and infrastructure
Perform other security projects and tasks as needed
Stay updated with the latest security trends threats and technologies.
Basic Qualifications:
Bachelors degree in Cybersecurity Computer Science Information Technology or related field.
Minimum of 10 years as a security engineer or similar role.
Strong understanding of network security cryptography and secure coding practices.
Experience with security protocols and technologies including SSL/TLS VPNs and multi-factor authentication (MFA).
Relevant security certifications (CISSP CISM CEH OSCP).
Proven exposure to security scanning tools
Exposure in scripting languages (e.g. Python Bash) for automation and security tool integration.
In-depth knowledge of security best practices and frameworks (e.g. OWASP NIST).
Experience with Azure cloud security or similar cloud platforms
Familiarity with security tools and technologies such as firewalls IDS/IPS SIEM and antivirus software/EDR.
Excellent problem-solving and analytical skills.
Effective communication and people skills.

Preferred Qualifications:
Masters degree in Cybersecurity Computer Science Information Technology or related field.
Knowledge of regulatory requirements and standards such as ISO 27001 NIST and GDPR.

EEO
At Construction Resources our people are the driving force behind everything we do. Construction Resources is an equal opportunity employer that aspires to be the best in the business by building an associate experience that celebrates growth development and purpose.

PHYSICAL DEMANDS
The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job.

While performing the duties of this job the employee is regularly required to speak or hear. The employee is frequently required to sit for extended periods of time stand walk climb stairs use hands to finger handle or feel and reach with hands and arms. Specific vision abilities required by this job include close vision distance vision color vision peripheral vision depth perception and ability to adjust focus.

POSITION TYPE/EXPECTED HOURS OF WORK
This is a full-time position that requires overtime as business needs dictate.

OTHER DUTIES
Please note: this job description is not designed to cover or contain a comprehensive listing of activities duties or responsibilities that are required of the employee for this job. Duties responsibilities and activities may change at any time with or without notice.

PRIVACY NOTICE
We value your privacy and want to ensure transparency regarding the collection and processing of your personal data. As part of our recruitment process we require your explicit consent to collect store and process your personal information including but not limited to your resume contact details professional experience and other relevant data.

This data will be used solely for recruitment and hiring purposes in accordance with our privacy policy and applicable data protection regulations. Your information will be stored securely and will not be shared with third parties without your consent.

By submitting your application you agree to the collection and processing of your personal data for the purposes stated above. You may withdraw your consent at any time by contacting us at