Security Engineer II

Job Description

Job Description

ESSENTIAL FUNCTIONS  

• SOC Engineering – Engineer and enhance Security Operations Center (SOC) capabilities, integrating security monitoring tools, SIEM solutions, and automation workflows in 24x7 mission critical environments. 

• Security Operations Enablement – Develop and implement security frameworks and processes that enhance the efficiency of security operations teams in multi-tenant and geographically diverse client environments. 

• Endpoint Security Management – Deploy, enhance, and maintain enterprise security solutions to align with best practices to minimize attack surfaces, threats, and security risks within the supported environments. 

• Incident Response Support – Work closely with SOC analysts to refine incident detection, investigation, and response capabilities including participation in 24x7 on-call escalation rotations. 

• Threat Intelligence Integration – Integrate threat intelligence feeds and analytics to improve proactive threat detection and mitigation. 

• Risk Management & Compliance – Ensure security controls comply with industry regulations such as NIST, ISO 27001, and SOC 2 including diligence assessments for new environments and new clients. 

• Security Engineering Development – Define and document security reference engineering and best practices for network and cloud environments. 

• Automation & Orchestration – Implement automation strategies for security processes, including security policy management and security alert triaging. 

• Stakeholder Collaboration – Work with IT, DevOps, and business units to align security policies with operational goals. 

• Continuous Improvement – Monitor emerging threats, security trends, and best practices to enhance enterprise security posture. 

EDUCATION  

• Bachelor's degree in Cybersecurity, Information Technology, or a related field. 

EXPERIENCE  

• IT Systems Engineering – 4-6 years of experience in engineering enterprise IT platforms. 

• Security Engineering – 4-6 years of experience managing and implementing enterprise security solutions. 

• SOC Engineering & Security Operations – 4-6 years in SOC engineering, incident response, or security automation. 

• Network Security – Proven experience contributing to the design and securing of network platforms, including VPNs, proxies, and IDS/IPS solutions. 

• Threat Intelligence & Detection – At least 4-6 years of experience working with SIEM platforms, threat hunting, and endpoint detection response (EDR) solutions. 

• Security Design – 4-6 years of experience in security design and implementation. 

• Azure Cloud Solutions – Proven expertise in designing and deploying Azure cloud solutions including security. 

REQUIREMENTS  

• Preferred Certifications – CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, Palo Alto Networks PCNSA/PCNSE, Fortinet FCP/FCSS or equivalent. 

• Microsoft – Microsoft Defender Certified preferred. 

• Security Management – Certified Information Security Manager (CISM) preferred. 

KNOWLEDGE   

• Security Operations – In-depth understanding of SOC workflows, log management, and SIEM solutions (Splunk, Sentinel, QRadar, etc.). 

• Firewall Technologies – Expertise in firewalls, including Palo Alto, Fortinet, Cisco, or Check Point. 

• Cloud Technologies – In-depth understanding of cloud computing principles, serverless architectures, and cloud-native development. 

• Cloud Security – Familiarity with cloud security models in AWS, Azure, and Google Cloud. 

• Security Standards & Compliance – Knowledge of cybersecurity principles, authentication protocols (OAuth, SAML). 

• Regulatory Frameworks – Strong knowledge of compliance standards and best practices such as NIST, ISO 27001, SOC-2, PCI-DSS, HIPAA, and GDPR. 

• Automation & Scripting – Experience with Python, PowerShell, or Bash for security automation. 

• Continuous Learning Mindset – Passion for staying up to date with industry trends, emerging technologies, and best practices. 

SKILLS  

• Security Design – Ability to contribute to the design and implementation of secure architectures. 

• Security Automation – Proficiency in automating security processes and threat detection workflows. 

• Automation & Scripting – Proficiency in PowerShell, Terraform, and ARM templates. 

• Project Management – Ability to manage security projects and drive cross-functional initiatives (moderate). 

• Project & Time Management – Skill in managing multiple projects, prioritizing tasks, working independently, and delivering high-quality solutions within deadlines. 

ABILITIES  

• Incident Response & Threat Hunting – Strong analytical skills for investigating security incidents. 

• Communication & Leadership – Strong ability to present security concepts to technical and non-technical stakeholders. 

• Strategic Thinking – Align security initiatives with business and IT strategies. 

• Risk Assessment – Identify and prioritize security risks with data-driven analysis. 

• Technical Leadership – Guide teams in implementing best practices for security operations. 

• Adaptability – Stay ahead of emerging cybersecurity threats and technologies. 

• Detail-Oriented – Maintain strong attention to detail and organizational skills.