Sr Enterprise Security Engineer

Equity Bank•Wichita, KS

1d•Onsite

About The Position

The Senior Enterprise Security Engineer is the senior hands-on technical security resource within Equity Bank’s Information Security Department. Reporting to the Director of Information Security, the role designs, implements, integrates, and maintains enterprise security controls across identity, endpoint, network, cloud, Microsoft 365, data protection, vulnerability management, and security monitoring environments. It translates security requirements and risk decisions into sustainable technical solutions, provides advanced escalation support and knowledge transfer to the IT Security Administrator, and partners with IT and business stakeholders to integrate security into systems, applications, cloud services, and enterprise initiatives. The role also supports incident response, audit and regulatory evidence, security automation, and protection of customer and bank information. The position is based on-site in Wichita, Kansas. It regularly works in an office setting and involves regular use of computers and electronic media.

Requirements

At least 5 years of information security or cybersecurity experience.
Hands-on experience designing, implementing, and supporting enterprise security controls.
Strong knowledge of Microsoft Entra ID and Microsoft 365 security.
Experience with identity governance, MFA, Conditional Access, SSO, authentication, privileged access, and Zero Trust.
Strong understanding of endpoint, server, network, cloud, remote access, vulnerability management, and security monitoring.
Experience with vulnerability assessment, remediation, incident investigation, and incident response.
Experience with PowerShell or similar scripting and automation tools.
Strong communication skills and the ability to explain complex security risks to technical and nontechnical audiences.
A bachelor’s degree in cybersecurity, computer science, information systems, or a related field is preferred, or equivalent relevant experience.

Nice To Haves

Experience in banking, financial services, fintech, insurance, healthcare, or another regulated industry.
Familiarity with FFIEC, GLBA, NIST Cybersecurity Framework, CIS Controls, and related security standards.
Experience with Microsoft security technologies, SIEM, endpoint protection, vulnerability management, identity platforms, data protection, or certificate services.
Experience with Microsoft Graph, APIs, infrastructure as code, or security orchestration.
Relevant certifications such as AZ-500, SC-100, SC-200, SC-300, CISSP, CISM, CCSP, Security+, CySA+, GIAC, or comparable security certifications.

Responsibilities

Design, implement, and improve enterprise security controls across identity, endpoint, network, cloud, Microsoft 365, and data protection.
Partner with IT and business teams to incorporate security into projects, applications, infrastructure, cloud services, and emerging technologies.
Identify security gaps and vulnerabilities and develop practical, sustainable solutions to reduce risk.
Design and manage Microsoft Entra security controls, including Conditional Access, Identity Protection, Privileged Identity Management, access governance, MFA, and Zero Trust.
Engineer and support security monitoring, endpoint protection, vulnerability management, cloud security, and data protection capabilities.
Conduct security architecture reviews for new systems, applications, vendors, cloud services, AI tools, and infrastructure changes.
Develop security standards and configuration baselines for privileged access, logging, system hardening, and key technology platforms.
Support Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, information protection, retention, and data governance.
Develop automation using PowerShell, Microsoft Graph, APIs, scripting, or security orchestration tools to improve efficiency and control effectiveness.
Investigate significant security findings, vulnerabilities, incidents, and control gaps and recommend long-term solutions.
Provide advanced technical support and guidance for incident response, identity security, endpoint security, certificate services, remote access, cloud security, and network security.
Mentor and provide technical guidance to the IT Security Administrator.
Support audits, regulatory examinations, and risk discussions by preparing technical documentation, diagrams, and evidence.