Security Engineer II

Sundt Construction, Inc. is seeking a Security Engineer II in Tempe, AZ (onsite) to implement, administer, and maintain security solutions that help protect the organization’s digital assets, infrastructure, systems, applications, and data. The role is focused primarily on execution and ongoing maintenance, working in partnership with cross-functional teams.

Role Overview

In this position, you will deploy security policies and controls, support secure communications across networks, and manage security tooling and access controls. You will also conduct assessments and testing, monitor alerts and incidents, and collaborate with development teams to support secure practices across the software lifecycle.

Responsibilities

• Safeguard organizational assets, including data, hardware, and software, through implementation of security policies and controls.
• Provide guidance on secure communication protocols and network infrastructure to support the integrity and confidentiality of data transmitted across networks.
• Implement and manage 1AM solutions to enforce access controls, authentication mechanisms, and user privileges while ensuring alignment with security policies and best practices.
• Design and implement secure network and system architectures, staying current on emerging threats and technologies and applying appropriate security measures.
• Conduct regular vulnerability assessments, penetration testing, and security audits, then remediate identified weaknesses in systems and applications.
• Monitor security alerts and incidents, analyze potential threats, respond to mitigate risk, and perform root cause analysis and develop incident response plans.
• Evaluate and manage security risks by developing and implementing risk mitigation strategies and ensuring compliance with relevant security standards and regulations.
• Collaborate with software development teams to integrate security practices into the software development lifecycle, including secure coding practices and security reviews.

Requirements

• Ability to work independently and manage multiple tasks in a fast-paced environment.
• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent work experience).
• Minimum 3–5 years of experience in cybersecurity or a related field.
• Strong problem-solving skills and attention to detail.
• Experience with scripting and programming languages for automation and integration (e.g., Python, PowerShell).
• Proficiency with security tools and technologies including Office 365, Azure, Sentinel One EDR & XOR, Tenable Nessus, Microsoft Defender, and Proofpoint.
• Relevant certifications such as CISSP, CISM, CEH, or equivalent (preferred).
• Strong communication and interpersonal skills for effective collaboration with cross-functional teams.
• Strong knowledge of security frameworks and standards, such as NIST and ISO 27001/27002.

Technologies

• Python, PowerShell
• Office 365, Azure
• Sentinel One EDR & XOR
• Tenable Nessus
• Microsoft Defender
• Proofpoint
• NIST
• ISO 27001/27002
• CISSP, CISM, CEH

Benefits

• Market Competitive Salary (paid weekly)
• Bonus eligibility based on company, group, and individual performance
• Employee Stock Ownership Plan & 401K
• Industry leading health coverage starting your first day
• Flexible Time Off (FTO)
• Medical, Health Savings, and Wellness credits
• Flexible Spending Accounts
• Employee Assistance Program
• Workplace Wellness Programs
• Mental Health Program
• Life and Disability Insurance
• Employee-Owner Perks
• Educational Assistance
• Sundt Foundation - Charitable Employee-Owner’s program

Location and Work Setting

Tempe, AZ (onsite).

Physical Requirements

• May stoop, kneel, or bend on an occasional basis.
• Must comply with all safety standards and procedures.
• Required to use hands to grasp, lift, handle, carry, or feel objects on a frequent basis.
• Will interact with people and technology frequently during a shift/work day.
• May lift, push, or pull objects up to 50 lbs on an occasional basis.
• Will sit, stand, or walk short distances for up to the entire duration of a shift/work day.
• Will use telephone, computer system, email, and other electronic devices frequently to communicate with internal and external customers or vendors.

Safety Level

Non-Safety Sensitive.

Additional Information

The job description is subject to change at any time and may include other duties as assigned.