Cyber Security Engineer II

As a security engineer, you will implement and improve security technologies, controls, and processes across enterprise and cloud environments.

Responsibilities

• Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments
• Support endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies
• Troubleshoot security-tool configurations, integrations, performance issues, and operational failures
• Evaluate security alerts, tool outputs, and configuration discrepancies to improve security effectiveness
• Implement security controls and configuration standards aligned to organizational policies and industry best practices
• Assist with testing, integrating, deploying, and documenting new security technologies
• Monitor control effectiveness and recommend improvements to increase coverage and reduce operational complexity
• Integrate security controls into cloud infrastructure, application platforms, and enterprise technology environments
• Implement and maintain security controls across public cloud, government cloud, and segmented cloud environments, as applicable
• Partner with Cloud Engineering and Infrastructure teams to address security misconfigurations, excessive permissions, exposed services, and insecure configurations
• Support cloud security posture management, cloud workload protection, and configuration-compliance initiatives
• Assist with hardening cloud workloads, containers, virtual machines, and supporting infrastructure
• Support secure baselines and security standards, including CIS benchmarks
• Participate in security reviews of infrastructure changes, cloud services, and new technology implementations
• Assist with validating curated container images, approved software libraries, and standardized infrastructure configurations
• Perform security assessments, configuration reviews, vulnerability analyses, and security testing
• Partner with Vulnerability Management, IT, Cloud Engineering, and Product Security to support vulnerability remediation and verification
• Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms
• Validate that security controls and remediation efforts address identified risks
• Maintain awareness of emerging vulnerabilities, threat-actor techniques, and security advisories
• Support security-risk assessments and document technical findings, recommendations, and mitigation activities
• Use approved AI-enabled security tools and generative AI to accelerate troubleshooting, analysis, configuration reviews, and technical investigations
• Apply AI-assisted analysis to identify patterns, correlate findings, and improve detection of vulnerabilities, misconfigurations, and control weaknesses
• Use approved AI coding assistants to develop and improve security scripts, automation routines, detection logic, and technical documentation
• Identify opportunities to streamline recurring security-engineering activities and reduce manual processes using AI
• Evaluate AI-generated recommendations for accuracy, security implications, and operational suitability before implementation
• Maintain human validation and oversight of AI-assisted security decisions
• Assist in evaluating risks associated with AI-enabled applications, AI agents, large language models, and third-party AI services
• Support controls addressing prompt injection, sensitive-data exposure, excessive permissions, insecure AI integrations, and unauthorized access
• Support monitoring and investigation of security events involving AI applications, automated agents, and AI-connected services
• Help enforce requirements governing approved AI usage, data handling, access controls, and secure integration
• Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms
• Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification
• Integrate security platforms to improve visibility, operational consistency, and data accuracy
• Troubleshoot automation failures, integration issues, and inconsistencies between connected technologies
• Document automation workflows, implementation requirements, and operating procedures
• Provide technical security-engineering assistance during incidents escalated by Security Operations
• Support incident investigations using log analysis, troubleshooting, control validation, and security-tool configuration changes
• Assist with containment measures, detection enhancements, and remediation activities
• Partner with Security Operations to improve alert quality, detection capabilities, and response effectiveness
• Participate in post-incident reviews and implement corrective actions addressing security-control gaps
• Participate in the incident on-call rotation
• Conduct periodic security assessments, control reviews, and technical validation activities
• Support security and compliance initiatives involving NIST, CIS, SOC 2, PCI DSS, and FedRAMP, as applicable
• Develop and maintain security-engineering procedures, technical standards, configuration documentation, and operational runbooks
• Gather technical evidence for internal audits, external assessments, and compliance activities
• Document technical risks, security findings, remediation efforts, and control improvements
• Contribute practical engineering input to security policies and technical standards
• Work closely with Security Operations, Product Security, Cloud Engineering, IT, Infrastructure, and Development teams
• Provide technical guidance on security technologies, configurations, and best practices
• Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives

Requirements

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience
• Four or more years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline
• Demonstrated experience working with enterprise security technologies and investigating technical security issues
• Experience collaborating with infrastructure, IT, security, or engineering teams

Technologies

• Cloud, SaaS, enterprise security technologies
• Endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, data protection technologies
• Public cloud, government cloud, segmented cloud environments
• Cloud security posture management, cloud workload protection
• CIS benchmarks, containers, virtual machines, patch-management platforms
• AI-enabled security tools, generative AI, AI coding assistants
• Python, PowerShell, APIs, security-orchestration platforms, security platforms
• Log analysis
• NIST, SOC 2, PCI DSS, FedRAMP
• Prompt injection, large language models, AI agents, Bash

Preferred

• Experience in a SaaS, cloud-native, or enterprise technology organization
• Experience with public-cloud security technologies, container security, or automated infrastructure security controls
• Experience developing security automation or integrating security technologies through APIs
• Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies
• Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP
• Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials