Senior Cybersecurity Engineer (Dallas, TX) - Austin Industries

Senior Cybersecurity Engineer Austin Industries is one of the nation's largest, most diversified U.S.-based construction companies. With more than 8,000 employee-owners, Austin Industries provides nearly every type of civil, commercial and industrial construction services through the expertise of our operating companies: Austin Bridge & Road, Austin Commercial and Austin Industrial. Austin Industries has an outstanding opportunity for a Senior Cybersecurity Engineer at our corporate headquarters in Dallas, Texas. Under the direction of the Director of Cybersecurity, the Senior Cybersecurity Engineer is a critical member of the Cybersecurity team, responsible for designing, implementing, improving, and maintaining security controls and solutions that protect the organization's information systems, networks, cloud environments, and data assets. This role serves as a technical authority on cybersecurity engineering and works closely with IT Helpdesk, Operations, Infrastructure, and business teams to reduce cyber risk, improve organizational resiliency, and support regulatory, compliance, and business objectives. The position requires deep technical expertise, strong analytical and troubleshooting capabilities, and a proactive, threat-driven mindset. The ideal candidate demonstrates exceptional customer service skills and the ability to translate security requirements into scalable, reliable, and operationally effective solutions that align security initiatives with business needs. The role also requires the highest ethical and professional standards, with a strong emphasis on trustworthiness, reliability, and accountability. Responsibilities: Design, implement, and maintain security controls across on-premises, cloud, and hybrid environments. Engineer and support security solutions supporting endpoint protection, identity and access management (IAM), network security, data protection, and cloud security. Lead secure architecture reviews for new systems, applications, and infrastructure initiatives to ensure security requirements are integrated by design. Evaluate, select, and implement cybersecurity tooling, including EDR/XDR, SIEM, DLP, CASB, email security, and vulnerability management platforms. Threat Detection & Incident Support: Develop, tune, and maintain threat detection mechanisms aligned with threat intelligence and MITRE ATT&CK techniques. Support security incident response activities, including investigation, containment, eradication, remediation, and post-incident analysis; participate in recurring incident response drills and tabletop exercises. Partner with SOC, IT Operations, and Infrastructure teams to improve detection accuracy, response effectiveness, and mean time to resolution. Vulnerability & Risk Management: Lead vulnerability management efforts, including vulnerability scanning, risk-based prioritization, remediation guidance, and validation of fixes. Perform technical risk assessments and contribute to formal enterprise risk register entries. Assist with threat modeling and security assessments of critical business systems and infrastructure. Cloud & Identity Security: Secure cloud platforms (e.g., Microsoft Azure, AWS) using native security capabilities and industry best practices. Implement and manage identity-centric security controls, including MFA, Conditional Access, and Privileged Access Management (PAM). Administer, support, and advance Zero Trust and passwordless authentication initiatives. Compliance & Governance Support: Provide technical expertise in support of cybersecurity frameworks and standards such as CIS, NIST CSF, NIST SP 800-171, CMMC, and ISO/IEC 27001. Support audits, assessments, and third-party security questionnaires by providing technical evidence, system documentation, and control explanations. Ensure implemented security controls align with documented policies, standards, and procedures. Collaboration & Leadership: Serve as a trusted cybersecurity technical advisor to IT leadership, technology teams, and business stakeholders. Mentor cybersecurity analysts and junior engineers; contribute to technical standards, procedures, and engineering best practices. Develop knowledge base documentation and deliver periodic training to Helpdesk staff to support first-level cybersecurity troubleshooting and triage. Communicate complex cybersecurity concepts clearly and effectively to both technical and non-technical audiences. Qualifications: Bachelor's degree in Information Technology or Cyber Security from an accredited university desired but not required. Proven experience designing and implementing security controls in enterprise environments. Experience implementing, administering and supporting enterprise Data Loss Prevention (DLP) solutions Experience implementing, administering, and supporting enterprise SIEM/XDR platforms. Experience implementing, administering, and supporting SOAR solutions across security operations environments. Hands-on experience with scripting and security automation, using tools such as PowerShell, Python, Ansible, Puppet, or agentic AI–driven automation platforms. Experience implementing or supporting compliance initiatives aligned to frameworks such as NIST 800-171, CMMC, or similar regulatory standards. Experience implementing or supporting cybersecurity controls and frameworks, including CIS Controls, NIST SP 800-53, and the NIST Cybersecurity Framework (NIST-CSF). Familiarity with penetration testing methodologies and tooling, including practical experience conducting or supporting offensive security assessments. Strong analytical and problem-solving skills. Strong investigation and research skills Deep understanding of modern security architectures and Zero Trust principles. Knowledge and understanding of current penetration testing methodologies and techniques Strong knowledge of Windows, Linux, networking fundamentals, and security protocols. Strong analytical and problem-solving skills. Ability to prioritize work based on risk and business impact. High attention to detail. Excellent written and verbal communication skills. Ability to work independently while collaborating across teams. Requirements: Minimum 5 years of hands-on experience in a Cybersecurity Engineering role Deep expertise in at least three of the following security domains: Endpoint security Identity and Access Management (IAM) Cloud security Data Loss Prevention (DLP) Network security Vulnerability management. Eligible candidates must possess one or more of the following valid certifications:

ISC2 CISSP

GIAC Security Professional (GSP) Microsoft Certified: Cybersecurity Architect Expert Advanced proficiency with Microsoft security platforms, including Entra ID, Conditional Access, Microsoft Defender, Intune, and Purview. Advanced experience managing and supporting enterprise Next-Gen cloud security solutions, such as Palo Alto Prisma and Zscaler. This role may occasionally be required to travel to remote job sites and office locations on an as-needed basis. Additionally, occasionally travel may be required to attend industry-related conferences and training. Applicants must be legally authorized to work for ANY employer in the United States. Austin Industries is unable to sponsor or take over sponsorship of an employment visa for this position. Benefits & Compensation: We offer excellent benefits including medical, dental, life and disability insurance, and a matching 401K plan. We are proud to be a 100% Employee-Owned Company (ESOP)! To learn more about our employee-ownership structure, please go to Austin Industries is an Equal Opportunity Employer. See the "Know Your Rights" poster available in English and Spanish. About Austin Industries: Austin Industries and its operating companies engage in almost every type of civil, commercial and industrial construction. Austin is owned entirely by its employees through its Employee Stock Ownership Plan (ESOP). Austin Industries has a rich history. We are one of the largest and most diversified construction firms in the nation. Austin stands on the core values of Uncompromising Integrity, Employee-ownership, Exemplary Service and Excellence in Safety. To learn more about our history, culture and operations, visit us at No Third-Party Inquiries Please This Company does not accept and will not consider unsolicited resumes or any other unsolicited candidate information submitted to the Company or any of its employee-owners by Austin External