Cybersecurity Engineer II, Identity and Access Management

At Benchmark, we are driven by our purpose: to innovate for a healthier, safer, and better-connected world to create a brighter future. When you join us, you become part of a team passionate about making a meaningful impact across various sectors, including commercial aerospace, defense, advanced computing, next-generation communications, complex industrials, medical, and semiconductor capital equipment. We prioritize career growth, fostering a culture that ensures you reach your full potential. At Benchmark, your work is purpose-driven, enabling you to create a positive impact on the world and make your career truly meaningful. You'll be part of a collaborative, diverse, and inclusive team that values your ideas and contributions.

Position Overview:

We are seeking a skilled and proactive Security Engineer / Analyst to join our cybersecurity team. This role is critical in safeguarding our hybrid infrastructure by managing endpoint protection, securing sensitive data, detecting threats and vulnerabilities, and ensuring timely remediation through collaborative patch management processes.

The ideal candidate will oversee endpoint protection, automate data classification and access to mitigate risks and ensure compliance, detect and respond to threats, secure identity and access, and work closely with infrastructure teams to ensure timely vulnerability remediation and maintain compliance across our global operations.

Key Responsibilities:

• Endpoint Protection & Threat Detection
• Manage and monitor endpoint security across the organization, ensuring protection against malware, ransomware, and other threats.
• Monitor, analyze and respond to advanced threats, malware, and behavioral anomalies using centralized security platforms.
• Maintain visibility into device health, compliance posture, and threat analytics across hybrid infrastructure.
• Data Protection & Compliance
• Monitor and analyze access patterns to sensitive data across file systems, collaboration platforms, and cloud storage to detect anomalies, potential insider threats, and policy violations.
• Implement and maintain automated data classification, access control policies, and alerting mechanisms to ensure regulatory compliance and reduce data exposure risks.
• Collaborate with legal, compliance, and IT teams to support audit readiness, generate reports on data access and usage, and enforce least privilege access to critical business information.
• Identity & Access Management
• Manage identity lifecycle processes including onboarding, offboarding, and role-based and attribute-based access control (RBAC, ABAC).
• Enforce authentication and authorization policies using multi-factor authentication (MFA), conditional access, and federated identity models.
• Apply least privilege principles across user, service, and administrative accounts.
• Monitor identity-related events and anomalies across cloud and on-premises environments.
• Vulnerability Management & Patch Coordination
• Collaborate with infrastructure and operations teams to establish and maintain a robust patch management process.
• Prioritize and remediate vulnerabilities based on risk, exploitability, and business impact.
• Integrate vulnerability scanning tools with ticketing and reporting systems to ensure accountability and tracking.
• Security Operations & Collaboration
• Participate in security incident response, root cause analysis, and post-incident reviews.
• Collaborate with cross functional IT and manufacturing systems teams to embed security into infrastructure and production workflows.
• Contribute to automation and orchestration of security tasks using scripting and integration tools.

Technical Skills & Tools:

*Experience with enterprise endpoint protection platforms (e.g., EDR, AV, threat analytics, data security and analytics).

• Strong understanding of IAM protocols (e.g., SAML, OAuth2, OpenID Connect) and directory services (e.g., Active Directory, Azure AD).
• Familiarity with SIEM and SOAR platforms for log aggregation, alerting, and automated response.
• Proficiency in vulnerability scanning tools (e.g., Qualys, Tenable, Rapid7).
• Familiarity with patch management tools and processes.
• Strong understanding of hybrid infrastructure (cloud/on-prem) and modern security frameworks.
• Knowledge of scripting languages (e.g., PowerShell, Python) for automation and reporting.
• Understanding of network security fundamentals (e.g., firewalls, segmentation, VPNs).
• Familiarity with compliance frameworks relevant to manufacturing (e.g., NIST CSF, ISO 27001, CMMC).

Qualifications:

• 3-5 years of experience in cybersecurity, preferably in a manufacturing or industrial environment with a focus on endpoint protection, identity management, and vulnerability remediation.
• Bachelor's degree in Computer Science, Information Security, or related field.
• Relevant certifications (e.g., Security+, CySA+, CISSP, Azure Security Engineer Associate) are highly desirable.
• Strong analytical, communication, and problem-solving skills.
• Ability to work independently and collaboratively in a fast-paced, global organization.

Education:Bachelor's Degree in Computer Science, Information Security or related field.

Geographical Location: Arizona:Tempe

Physical Location: Tempe, AZ - Headquarters

Shift: Shift 1

Work Schedule: M-F 0900-1730

Full Time

Export Control:This job position may include access to controlled information or technology covered under applicable U.S. export control laws. As such, employment for this job position may be contingent on either verification that an applicant falls under the definition of a "U.S. Person" (which includes U.S. citizens, U.S. lawful permanent residents, and those granted U.S. asylum or refugee status)or on the Company timely obtaining any necessary export license required under federal laws. The Company evaluates such export license situations on a case-by-case basis and may decline to proceed with a job applicant in its sole discretion since export license applications can take many weeks to be processed.

In our innovative environment, you'll work with cutting-edge technology, leading the way in engineering design and delivering world-class manufacturing services for products that make a real difference in the lives of others. At Benchmark, your career is more than just a job. It's an opportunity to be part of something bigger, where your work matters and helps shape a brighter future for everyone. Together, we will achieve extraordinary things.

Benchmark is an equal opportunity employer. We are bringing together a diverse workforce with unique talents, life experiences, cultures, and perspectives to promote an innovative, collaborative, and creative place to work. If you need assistance or an accommodation due to a disability, please email us atcareers@bench.com.