Job Description
Summary:
The Security Engineer II is responsible for implementing and maintaining security controls, monitoring systems, and supporting incident response across the company’s technology environment. This role works on moderately complex projects with minimal supervision, ensuring that applications, infrastructure, and data remain secure and compliant. The Engineer II partners with IT, Engineering, and Security Operations to identify risks, remediate vulnerabilities, and strengthen overall security posture.
Duties & Responsibilities:
• Implement, configure, and maintain security tools, monitoring systems, and access controls.
• Support vulnerability management, including scanning, analysis, and remediation coordination.
• Participate in incident detection, response, and root cause analysis.
• Collaborate with Engineering and IT teams to embed security best practices into development and infrastructure.
• Assist in maintaining compliance with security standards and regulatory requirements (e.g., SOC 2, ISO 27001, NIST).
• Perform security assessments and testing of applications, systems, and cloud environments.
• Contribute to threat modeling and risk assessments for new projects and technologies.
• Create and maintain security documentation, runbooks, and knowledge bases.
• Provide guidance and mentorship to junior engineers.
• Stay current on emerging security threats, tools, and technologies.
Qualifications:
• Bachelor’s degree in Computer Science, Cybersecurity, Engineering, or related field; equivalent experience considered.
• 4–6 years of experience in security engineering, IT security, or related roles.
• Strong understanding of network, application, and cloud security principles.
• Experience with security tools such as SIEM, IDS/IPS, vulnerability scanners, and endpoint protection.
• Knowledge of cloud platforms (AWS, GCP, Azure) and security services.
• Familiarity with compliance and security frameworks (NIST, ISO 27001, SOC 2, CIS).
• Scripting or automation experience (Python, Bash, or equivalent) preferred.
• Strong analytical and problem-solving skills.
• Good written and verbal communication abilities.
• Industry certifications such as CISSP, GSEC, or CEH preferred.