Cybersecurity Engineer II

One Step Secure IT offers a benefits-forward security engineering role onsite in Phoenix, where you design, implement, and maintain security solutions for our organization and client environments. This role blends hands-on technical work with client-facing collaboration and mentorship of junior staff, with a strong emphasis on regulatory compliance, including Arizona data breach laws. If you thrive in a collaborative, solutions-driven culture that values practical impact and ongoing learning, this position fits well.

Benefits

• 401(k)
• 401(k) matching
• Dental insurance
• Flexible spending account
• Health insurance
• Health savings account
• Life insurance
• Paid time off
• Vision insurance

About the Role

The Security Solutions Engineer II is responsible for designing, implementing, and maintaining security solutions that protect both One Step Secure IT and its clients. You will lead projects, manage incident response, ensure adherence to industry standards and state regulations—including Arizona’s data breach notification laws—and mentor junior staff.

Responsibilities

• Design and deploy security controls and architectures tailored to client environments
• Incorporate cybersecurity best practices into development and deployment lifecycles
• Maintain security tools, processes, and policies aligned with NIST, CIS, ISO 27001, HIPAA, and PCI DSS
• Lead vulnerability assessments and penetration testing, overseeing remediation efforts
• Manage incident response, coordinate with stakeholders, ensure compliance with Arizona breach notification laws, and conduct post-incident reviews
• Develop and update security policies and deliver training for internal staff and clients
• Mentor junior security engineers and oversee security-focused projects
• Monitor security alerts and events using SIEM and related tools
• Support patch management across client environments
• Investigate and report potential vulnerabilities or breaches
• Prepare regular security reports for senior management and clients
• Assist with audits and regulatory compliance
• Collaborate with sales and account management to assess client security needs and design solutions
• Implement automation and advanced tools such as MFA and encryption to scale security across multiple clients

Requirements

• Strong analytical and problem-solving abilities
• Excellent communication skills, able to explain security concepts to technical and non-technical audiences
• Strong collaboration and client-facing capabilities
• Familiarity with NIST, CIS, and ISO 27001 frameworks
• Cloud security knowledge in AWS and Azure
• Understanding of attack vectors and mitigation techniques such as phishing and malware
• Knowledge of HIPAA and PCI DSS compliance standards
• Experience with automation in multi-client environments

Technologies

• AWS
• Azure
• SIEM
• MFA
• Encryption
• Windows
• Linux
• MacOS
• TCP/IP
• HTTP
• DNS
• NIST
• CIS
• ISO 27001

Preferred Background

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience)
• Certifications such as Security+, CEH, CASP, SSCP, CISSP, or CISM
• 4 to 6 years in cybersecurity, including at least 2 years as a Security Engineer
• Familiarity with NIST, CIS, ISO 27001 and cloud platforms AWS and Azure
• Knowledge of TCP/IP, HTTP, DNS
• Experience with firewalls, IDS/IPS, and vulnerability management tools
• Knowledge of Windows, Linux, and MacOS
• Experience in MSP or multi-client environments is highly desirable
• Familiarity with Arizona data breach notification laws (A.R.S. §§ 18-551, 18-552) is a plus

Details

Job type: Full-time

Location: Phoenix, AZ 85027 (onsite)

Work location: In person