Security Engineer II

Job Description

Job Description

ESSENTIAL FUNCTIONS  

• SOC Engineering – Engineer and enhance Security Operations Center (SOC) capabilities, integrating security monitoring tools, SIEM solutions, and automation workflows in 24x7 mission critical environments. 

• Security Operations Enablement - Implement security frameworks and processes that enhance the efficiency of security operations teams in multi-tenant and geographically diverse client environments. 

• Endpoint Security Management – Deploy, enhance, and maintain enterprise security solutions to align with best practices to minimize attack surfaces, threats, and security risks within the supported environments. 

• Incident Response Support - Work closely with SOC analysts and Security Engineers to refine incident detection, investigation, and response capabilities including participation in 24x7 on-call escalation rotations while developing and/or modifying incident response procedures. Exercises independent judgment in analyzing and responding to security incidents. 

• Thread Analysis - Performs advanced analysis of security threats and system vulnerabilities 

• Threat Intelligence Integration - Integrate threat intelligence feeds and analytics to improve proactive threat detection and mitigation. 

• Risk Management & Compliance - Ensure security controls comply with industry regulations such as NIST, ISO 27001, and SOC 2. 

• Security Engineering Development - Define and document security reference engineering and best practices for network and cloud environments. 

• Automation & Orchestration - Implement automation strategies for security processes, including security policy management and security alert triaging. 

• Stakeholder Collaboration - Work with IT, DevOps, and business units to align security policies with operational goals. 

• Continuous Improvement - Monitor emerging threats, security trends, and best practices to enhance enterprise security posture. 

EDUCATION  

• Education – Associate’s degree in Cybersecurity, Information Technology, and related field hands on experience (required) 

• Preferred Certifications - CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, Palo Alto Networks PCNSA/PCNSE, or equivalent. 

• Security Management - Certified Information Security Manager (CISM) required 

EXPERIENCE  

• IT Systems Engineering - At least 3-6 years of experience in engineering enterprise IT platforms. 

• Security Engineering - At least 2-5 years of experience managing and implementing enterprise security solutions. 

• SOC Engineering & Security Operations - Minimum of 3 years in SOC engineering, incident response, or security automation. 

• Network Security - Proven experience designing and securing network platforms, including VPNs, proxies, and IDS/IPS solutions. 

• Threat Intelligence & Detection – At least 2-4 years of experience working with SIEM platforms, threat hunting, and endpoint detection response (EDR) solutions. 

• Security Design - A minimum of 3 years of experience in security design and implementation. 

• Azure Cloud Solutions - Proven expertise in designing and deploying Azure cloud solutions including security 

KNOWLEDGE  

• Security Operations - In-depth understanding of SOC workflows, log management, and SIEM solutions (Splunk, Sentinel, QRadar, etc.). 

• Firewall Technologies - Expertise in firewalls, including Palo Alto, Fortinet, Cisco, or Check Point. 

• Cloud Technologies – In-depth understanding of cloud computing principles, serverless architectures, and cloud-native development. 

• Cloud Security - Familiarity with cloud security models in AWS, Azure, and Google Cloud. 

• Security Standards & Compliance – Knowledge of cybersecurity principles, authentication protocols (OAuth, SAML). 

• Regulatory Frameworks - Strong knowledge of compliance standards and best practices such as NIST, ISO 27001, SOC-2, PCI-DSS, HIPAA, and GDPR. 

• Automation & Scripting - Experience with Python, PowerShell, or Bash for security automation. 

• Continuous Learning Mindset – Passion for staying up to date with industry trends, emerging technologies, and best practices. 

SKILLS  

• Security Design - Ability to design and implement secure architectures. 

• Incident Response & Threat Hunting - Strong analytical skills for investigating security incidents. 

• Security Automation - Proficiency in automating security processes and threat detection workflows. 

• Project Management - Ability to manage security projects and drive cross-functional initiatives. 

• Communication & Leadership - Strong ability to present security concepts to technical and non-technical stakeholders. 

• Strategic Thinking - Align security initiatives with business and IT strategies. 

• Risk Assessment - Identify and prioritize security risks with data-driven analysis. 

• Technical Leadership - Guide teams in implementing best practices for security operations. 

• Adaptability - Stay ahead of emerging cybersecurity threats and technologies 

• Automation & Scripting - Proficiency in PowerShell, Terraform, and ARM templates. 

• Detail-Oriented - Maintain strong attention to detail and organizational skills. 

• Leadership & Mentorship – Strong ability to mentor and guide technical teams, fostering technical growth and collaboration. 

• Effective Communication – Ability to translate complex technical concepts into clear insights for both technical and non-technical audiences.