Security Engineer II
Job Description
Hands-on role focused on operationalizing and improving security controls across cloud, identity, endpoints, and automation.
Responsibilities
- Configure, deploy, and tune security technologies across Barracuda’s cloud and enterprise environment to improve strength, coverage, timeliness, and auditability of security controls.
- Build and operate cloud, SaaS, and network security posture management capabilities (CSPM, SSPM, NSPM) using platforms such as Wiz, CrowdStrike, or AlgoSec.
- Onboard SaaS platforms into security posture management through API integrations and service-account configurations, coordinating with application owners to expand control coverage.
- Engineer and harden identity and access management controls in a cloud identity platform such as Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM), MFA, and provisioning of cloud administrator accounts.
- Administer privileged access management (PAM) using a solution such as CyberArk, including account onboarding, safe creation and assignment, access monitoring, and integrations with security tools.
- Automate recurring security reviews and configuration drift detection (for example, changes to Conditional Access and Named Location) using scripting and job-scheduling tools such as Python, PowerShell, SQL, and Git-based comparisons.
- Develop automated security reporting and dashboards using Python, SQL, and Power BI to track control status, coverage, and timeliness for stakeholders and auditors.
- Manage endpoint security and device compliance through mobile device management tooling such as Microsoft Intune, including scheduled and on-demand policy updates.
- Support the break-glass and emergency-access program to ensure critical controls are resilient, monitored, and audit-ready.
Requirements
- Bachelor’s degree in Computer Science or a related field and 2 years of relevant security experience, or an equivalent combination of education and experience.
- Hands-on experience configuring and deploying security technologies across cloud environments such as Microsoft Azure or AWS.
- Working knowledge of identity and access management concepts and tooling, including Microsoft Entra ID, Conditional Access, PIM, MFA, and PAM solutions such as CyberArk.
- Experience with cloud and SaaS security posture tooling across CSPM, SSPM, and NSPM (for example Wiz, CrowdStrike, AlgoSec).
- Proficiency in scripting and automation with Python, PowerShell, and SQL, using Git source control and job scheduling to build repeatable, auditable processes.
- Ability to build security reporting and metrics using Power BI to improve timeliness and visibility of control status.
- Familiarity with endpoint management and compliance tooling such as Microsoft Intune, plus experience working with log and event data for security monitoring.
- Strong documentation and communication skills with a collaborative approach across engineering, IT, and security teams.
- Exposure to security compliance frameworks such as SOC 2, ISO 27001, and NIST CSF; relevant certifications are a plus.
Technologies
- Microsoft Azure, AWS
- Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), MFA
- CyberArk
- Wiz, CrowdStrike, AlgoSec
- CSPM, SSPM, NSPM
- API integrations, service-account configurations
- Python, PowerShell, SQL, Git, Named Location changes
- Power BI
- Microsoft Intune
Compensation
- USD 102,000 - 135,000 per year
- Compensation depends on factors including experience, qualifications, and work location.
- May be eligible for bonuses and equity; final compensation determined by the selected candidate’s qualifications.
- Compensation and benefits are subject to change and may vary by location and level.
Benefits
- Equity in the form of non-qualifying options
- High-quality health benefits
- Retirement Plan with employer match
- Career-growth opportunities
- Flexible Time Off and Paid Time Off
- Volunteer opportunities
What You’ll Get From Us
- A team culture where you can voice your opinion and make an impact
- Internal mobility, including cross training and opportunities to reach your next career step within Barracuda
Location: Alpharetta, GA (hybrid)
REQ ID: 27-0492