Senior Security Engineer

Starting wage is based on a number of factors including, but not limited to, the position being offered, location, education, training, and/or experience. Construction Resources offers additional competitive and non-financial benefits.

• Design, implement, and maintain an Information Security Program
• Lead or participate in incident response for cyber incidents
• Vulnerability management
• Security compliance
• Security awareness training
• Risk management
• Identity and access management
• Cloud security
• Continuous improvement of security posture

• Design and implement secure architecture for applications and infrastructure (on‑premises and in the cloud)
• Develop and maintain security policies, standards, and guidelines
• Work with enterprise systems team to develop and implement code scanning into the CI/CD pipelines
• Implement vulnerability security testing tools and frameworks
• Conduct threat modeling and risk assessments
• Assist in assessing readiness and passing compliance audits for applicable data protection laws and regulations (e.g., PCI‑DSS)
• Assess gaps in security practices and propose appropriate solutions
• Collaborate with development, operations, and IT teams to promote security best practices, including service level agreements, availability, continuity, system performance, system security, documentation, technology adoption, and planning
• Advocate for security within the organization
• Participate in the preparation and execution of cyber security incident response plans, exercises, and events
• Assist in preparing and exercising resilience, incident response, business continuity, and disaster recovery plans
• Support security awareness program
• Manage annual third‑party penetration testing and findings remediation
• Build and participate in a third‑party risk management program; perform vendor and partner risk assessments
• Perform security audits on applications and infrastructure
• Perform other security projects and tasks as needed
• Stay updated with the latest security trends, threats, and technologies

• Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field
• Minimum of 10 years as a security engineer or similar role
• Strong understanding of network security, cryptography, and secure coding practices
• Experience with security protocols and technologies, including SSL/TLS, VPNs, and multi‑factor authentication (MFA)
• Relevant security certifications (CISSP, CISM, CEH, OSCP)
• Proven exposure to security scanning tools
• Exposure in scripting languages (e.g., Python, Bash) for automation and security tool integration
• In‑depth knowledge of security best practices and frameworks (e.g., OWASP, NIST)
• Experience with Azure cloud security or similar cloud platforms
• Familiarity with security tools and technologies, such as firewalls, IDS/IPS, SIEM, and antivirus/EDR
• Excellent problem‑solving and analytical skills
• Effective communication and people skills

• Master’s degree in Cybersecurity, Computer Science, Information Technology, or related field
• Knowledge of regulatory requirements and standards, such as ISO 27001, NIST, and GDPR

• Medical, Dental, Vision
• Employer‑paid basic employee life and AD&D insurance
• Employer‑paid long‑term disability
• Flexible spending accounts
• Voluntary short‑term disability, life and AD&D insurance, accident insurance, critical illness insurance

At Construction Resources, our people are the driving force behind everything we do. Construction Resources is an equal‑opportunity employer that aspires to be the best in the business by building an associate experience that celebrates growth, development, and purpose.

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. While performing the duties of this job, the employee is regularly required to speak or hear, sit for extended periods of time, stand, walk, climb stairs, use hands to finger, handle or feel, and reach with hands and arms.

Specific vision abilities required by this job include close vision, distance vision, color vision, peripheral vision, depth perception, and ability to adjust focus.

This is a full‑time position that requires overtime as business needs dictate.

Please note:

this job description is not designed to cover or contain a comprehensive listing of activities, duties, or responsibilities that are required of the employee for this job. Duties, responsibilities, and activities may change at any time, with or without notice.