Sr Enterprise Security Engineer

Equity Bank•Wichita, KS

1d•Onsite

About The Position

The Senior Enterprise Security Engineer serves as the senior hands-on technical security resource within the Information Security Department and reports to the Director of Information Security. The role designs, implements, integrates, and maintains enterprise security controls across identity, endpoint, network, cloud, Microsoft 365, data protection, vulnerability management, and security monitoring environments. The position translates information security requirements and risk decisions into sustainable technical solutions, provides advanced escalation support and knowledge transfer to the IT Security Administrator, and partners with Information Technology and business stakeholders to incorporate security into systems, applications, cloud services, and enterprise initiatives. It also supports incident response, audit and regulatory evidence, security automation, and the protection of customer and bank information.

Requirements

At least 5 years of information security or cybersecurity experience.
Hands-on experience designing, implementing, and supporting enterprise security controls.
Strong knowledge of Microsoft Entra ID and Microsoft 365 security.
Experience with identity governance, MFA, Conditional Access, SSO, authentication, privileged access, and Zero Trust.
Strong understanding of endpoint, server, network, cloud, remote access, vulnerability management, and security monitoring.
Experience with vulnerability assessment, remediation, incident investigation, and incident response.
Experience with PowerShell or similar scripting and automation tools.
Strong communication skills and ability to explain complex security risks to technical and nontechnical audiences.

Nice To Haves

Bachelor’s degree in cybersecurity, computer science, information systems, or a related field, or equivalent relevant experience.
Experience in banking, financial services, fintech, insurance, healthcare, or another regulated industry.
Familiarity with FFIEC, GLBA, NIST Cybersecurity Framework, CIS Controls, and related security standards.
Experience with Microsoft security technologies, SIEM, endpoint protection, vulnerability management, identity platforms, data protection, or certificate services.
Experience with Microsoft Graph, APIs, infrastructure as code, or security orchestration.
Relevant certifications such as AZ-500, SC-100, SC-200, SC-300, CISSP, CISM, CCSP, Security+, CySA+, GIAC, or comparable security certifications.

Responsibilities

Design, implement, and improve enterprise security controls across identity, endpoint, network, cloud, Microsoft 365, and data protection.
Partner with IT and business teams to incorporate security into projects, applications, infrastructure, cloud services, and emerging technologies.
Identify security gaps and vulnerabilities and develop practical, sustainable solutions that reduce risk.
Design and manage Microsoft Entra security controls, including Conditional Access, Identity Protection, Privileged Identity Management, access governance, MFA, and Zero Trust.
Engineer and support security monitoring, endpoint protection, vulnerability management, cloud security, and data protection capabilities.
Conduct security architecture reviews for new systems, applications, vendors, cloud services, AI tools, and infrastructure changes.
Develop security standards and configuration baselines for privileged access, logging, system hardening, and key technology platforms.
Support Microsoft Purview capabilities, including Data Loss Prevention, sensitivity labeling, information protection, retention, and data governance.
Develop automation using PowerShell, Microsoft Graph, APIs, scripting, or security orchestration tools to improve efficiency and control effectiveness.
Investigate significant security findings, vulnerabilities, incidents, and control gaps and recommend long-term solutions.
Provide advanced technical support and guidance for incident response, identity security, endpoint security, certificate services, remote access, cloud security, and network security.
Mentor and provide technical guidance to the IT Security Administrator.
Support audits, regulatory examinations, and risk discussions by preparing clear technical documentation, diagrams, and evidence.