Cybersecurity Engineer

Sunwest Bank•Draper, UT

3d•Onsite

About The Position

The Cybersecurity Engineer strengthens cyber resilience in a highly regulated financial environment through senior-level security analysis, incident response, and technical ownership of cybersecurity platforms. The role investigates high-severity alerts and escalated security events and designs, configures, tunes, and improves tools and controls used to detect, prevent, and respond to threats. The engineer partners with IT, infrastructure, cloud, identity, development, AI, data, and business teams to reduce cyber risk, improve control effectiveness, and support secure enterprise operations. The position is onsite at Sunwest Bank’s Draper office. The schedule is Monday through Friday, with hours that may vary based on operational needs and may include early mornings or extended hours. Occasional travel of up to 10% is required. The role has sedentary physical demands, including limited activity, no lifting, and limited walking. The position reports to the Chief Information Security Officer (CISO). It is classified as exempt. The job description also notes that employment is contingent on Sunwest Bank’s review of criminal conviction history under Section 19 of the Federal Deposit Insurance Act.

Requirements

Demonstrated ability to independently investigate, scope, contain, and coordinate responses to complex cybersecurity events and incidents using SIEM, EDR/XDR, NDR, email security, identity, cloud, data governance, or similar technologies.
Hands-on experience administering, configuring, tuning, or improving cybersecurity tools and platforms in an enterprise environment.
Strong technical understanding of endpoint security, identity and access management, network security, email security, cloud security, logging, vulnerability management, and data protection.
Experience creating or improving detections, alerts, dashboards, response playbooks, security workflows, or automation to improve security operations effectiveness.
Working knowledge of cybersecurity frameworks and threat-informed defense concepts, including NIST CSF, MITRE ATT&CK, CIS, and control validation methods.
Ability to translate technical security issues into clear, risk-based recommendations for technical teams, business stakeholders, and leadership.
Ability to work in a small-team environment involving senior analyst responsibilities, platform ownership, escalation support, and hands-on execution.

Nice To Haves

Five or more years of experience in cybersecurity, information security, security engineering, IT security operations, or related technical security roles.
Experience with Microsoft Defender XDR, Microsoft Sentinel, Purview, Intune, Proofpoint, Tenable, Snyk, Azure security capabilities, or similar security platforms.
Experience with scripting, automation, SOAR, API integrations, PowerShell, Python, KQL, or other methods to improve detection, response, reporting, or security operations efficiency.
Experience in financial services or another regulated industry, including familiarity with FFIEC, GLBA, PCI DSS, HIPAA, or similar requirements.
Experience supporting vulnerability management, secure configuration baselines, cloud security, application security, AI governance, or secure software development practices.
Relevant certifications such as CompTIA Security+, CySA+, Microsoft Security certifications, GIAC, CISSP, or CRISC, or equivalent practical experience.
Bachelor’s degree in Cybersecurity, Information Security, Computer Science, Information Technology, or a related field, or equivalent practical experience.

Responsibilities

Lead investigation and response for high-severity cybersecurity alerts, escalated analyst cases, suspicious activity, and confirmed or suspected incidents across endpoint, identity, email, network, cloud, and application environments.
Own and continuously improve cybersecurity platforms, including their configuration, tuning, integrations, alert logic, detection coverage, dashboards, reporting, automation, and operational workflows.
Design, implement, and validate technical security controls across enterprise systems to improve prevention, detection, response, recovery, and audit readiness.
Build and refine threat-informed detections, response playbooks, hunting methods, and control improvements using frameworks such as MITRE ATT&CK and NIST CSF 2.0, along with applicable security and regulatory expectations.
Translate threat intelligence, vulnerability findings, incident lessons learned, and control gaps into practical engineering improvements that reduce risk and improve security operations effectiveness.
Partner with IT, infrastructure, cloud, identity, development, AI, data, and business teams to embed security controls into systems, applications, platforms, and processes.
Support audits, examinations, risk assessments, control validation, third-party risk reviews, and remediation by providing technical security expertise and evidence.
Mentor Cybersecurity Analysts, provide escalation support, improve analyst workflows, and help develop mature, repeatable security operations practices.
Attend and complete required classroom, computer-based, web-based, and seminar training.
Maintain awareness of and comply with the Bank’s Code of Ethics and Conduct and applicable laws, regulations, internal policies, and procedures.