Cyber Security Engineer 2

The Cyber Security Engineer II is responsible for implementing, maintaining, and improving security technologies, controls, and processes that protect the organization’s infrastructure, cloud environments, applications, and sensitive information.

This hands-on role supports security engineering, cloud security, vulnerability management, security automation, incident response, and emerging cybersecurity threats. The Cyber Security Engineer II independently manages moderately complex security initiatives, troubleshoots security technologies, and collaborates with IT, Product Security, Cloud Engineering, Infrastructure, and Development teams to strengthen the organization’s overall security posture.

The role also supports the responsible adoption of artificial intelligence within cybersecurity operations by using approved AI technologies to improve efficiency, enhance threat detection, accelerate investigations, and automate repetitive security activities.

As the organization expands its cloud, SaaS, automation, and AI-enabled capabilities, effective security engineering is essential to protecting business operations and sensitive information. This role helps ensure that security controls remain effective, scalable, and aligned with evolving technologies and threats.

Through technical expertise, cross-functional partnership, and continuous improvement, the Cyber Security Engineer II helps reduce security risk, strengthen system resilience, improve operational efficiency, and balance security requirements with business needs.

Security Engineering and Technology Management

• Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments.
• Support endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies.
• Troubleshoot security-tool configurations, integrations, performance issues, and operational failures.
• Evaluate security alerts, tool outputs, and configuration discrepancies to identify opportunities to improve security effectiveness.
• Implement security controls and configuration standards aligned with organizational policies and industry best practices.
• Assist with testing, integrating, deploying, and documenting new security technologies.
• Monitor the effectiveness of implemented controls and recommend improvements that increase coverage and reduce operational complexity.
• Support integration of security controls into cloud infrastructure, application platforms, and enterprise technology environments.

Cloud and Infrastructure Security

• Implement and maintain security controls across public cloud, government cloud, and segmented cloud environments, as applicable.
• Partner with Cloud Engineering and Infrastructure teams to address security misconfigurations, excessive permissions, exposed services, and insecure configurations.
• Support cloud security posture management, cloud workload protection, and configuration-compliance initiatives.
• Assist with hardening cloud workloads, containers, virtual machines, and supporting infrastructure.
• Support secure baseline configurations and security standards, including CIS benchmarks.
• Participate in security reviews of infrastructure changes, cloud services, and new technology implementations.
• Assist with validating curated container images, approved software libraries, and standardized infrastructure configurations.

Vulnerability and Risk Management

• Perform security assessments, configuration reviews, vulnerability analyses, and security testing.
• Partner with Vulnerability Management, IT, Cloud Engineering, and Product Security teams to support vulnerability remediation and verification.
• Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms.
• Validate that security controls and remediation activities adequately address identified risks.
• Maintain awareness of emerging vulnerabilities, threat-actor techniques, and security advisories.
• Support security-risk assessments and document technical findings, recommendations, and mitigation activities.

Artificial Intelligence Security and Responsible AI Adoption

• Use approved AI-enabled security tools and generative AI technologies to accelerate troubleshooting, analysis, configuration reviews, and technical investigations.
• Apply AI-assisted analysis to identify patterns, correlate findings, and improve detection of vulnerabilities, misconfigurations, and control weaknesses.
• Use approved AI coding assistants to develop and improve security scripts, automation routines, detection logic, and technical documentation.
• Identify opportunities to use AI to streamline recurring security-engineering activities and reduce manual processes.
• Evaluate AI-generated technical recommendations for accuracy, security implications, and operational suitability before implementation.
• Maintain appropriate human validation and oversight of AI-assisted security decisions.
• Assist in evaluating risks associated with AI-enabled applications, AI agents, large language models, and third-party AI services.
• Support controls addressing prompt injection, sensitive-data exposure, excessive permissions, insecure AI integrations, and unauthorized access.
• Support monitoring and investigation of security events involving AI applications, automated agents, and AI-connected services.
• Help enforce organizational requirements governing approved AI usage, data handling, access controls, and secure integration.

Security Automation and Process Improvement

• Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms.
• Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification.
• Integrate security platforms to improve visibility, operational consistency, and data accuracy.
• Troubleshoot automation failures, integration issues, and inconsistencies between connected technologies.
• Identify opportunities to improve workflows, reduce manual effort, and increase operational effectiveness.
• Document automation workflows, implementation requirements, and operating procedures.

Security Operations and Incident Response

• Provide technical security-engineering assistance during incidents escalated by Security Operations.
• Support incident investigations through log analysis, troubleshooting, control validation, and security-tool configuration changes.
• Assist with containment measures, detection enhancements, and remediation activities.
• Partner with Security Operations to improve alert quality, detection capabilities, and response effectiveness.
• Participate in post-incident reviews and implement corrective actions addressing security-control gaps.
• Participate in the incident on-call rotation.

Security Assessments, Governance, and Documentation

• Conduct periodic security assessments, control reviews, and technical validation activities.
• Support security and compliance initiatives involving NIST, CIS, SOC 2, PCI DSS, and FedRAMP, as applicable.
• Develop and maintain security-engineering procedures, technical standards, configuration documentation, and operational runbooks.
• Gather technical evidence for internal audits, external assessments, and compliance activities.
• Document technical risks, security findings, remediation efforts, and control improvements.
• Contribute practical engineering input to security policies and technical standards.

Cross-Functional Collaboration

• Work closely with Security Operations, Product Security, Cloud Engineering, IT, Infrastructure, and Development teams.
• Provide technical guidance regarding security technologies, configurations, and best practices.
• Participate in technical discussions, security reviews, and cross-functional initiatives.
• Communicate technical security risks and recommendations clearly and effectively.
• Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives.

Required

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience.
• Four or more years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline.
• Demonstrated experience working with enterprise security technologies and investigating technical security issues.
• Experience collaborating with infrastructure, IT, security, or engineering teams.

Preferred

• Experience working in a SaaS, cloud-native, or enterprise technology organization.
• Experience with public-cloud security technologies, container security, or automated infrastructure security controls.
• Experience developing security automation or integrating security technologies through APIs.
• Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies.
• Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP.
• Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials.

• Intermediate knowledge of cybersecurity concepts, security architecture, defense-in-depth principles, and common security controls.
• Hands-on experience implementing, administering, or troubleshooting enterprise security technologies.
• Working knowledge of EDR/XDR, SIEM, vulnerability management, identity and access management, or cloud-security platforms.
• Understanding of common vulnerabilities, attack techniques, threat actors, and security-assessment methodologies.
• Familiarity with incident-response processes, security investigations, and log analysis.
• Ability to independently troubleshoot moderately complex security issues with minimal supervision.
• Experience evaluating security risks and recommending practical mitigation measures.
• Familiarity with cloud infrastructure and security concepts in AWS, Microsoft Azure, or Google Cloud.
• Understanding of networking fundamentals, operating-system security, authentication, authorization, and encryption.
• Familiarity with cloud-security configurations, workload protection, and identity management.
• Basic-to-intermediate scripting experience using Python, PowerShell, Bash, or similar technologies.
• Experience working with APIs, system integrations, or security-automation tools.
• Ability to interpret technical documentation, security findings, and system-generated reports.
• Familiarity with generative AI, large language models, AI-assisted analysis, and their practical use in cybersecurity.
• Awareness of AI security risks, including prompt injection, model misuse, data leakage, insecure integrations, and unauthorized access.
• Understanding of responsible AI use, including protecting sensitive information and independently validating AI-generated output.
• Ability to translate manual security tasks into repeatable, automated workflows.
• Effective written and verbal communication skills, including the ability to present technical information to technical and nontechnical stakeholders.

• Strong analytical thinking and technical problem-solving abilities.
• Sound judgment when balancing security requirements with business and operational needs.
• Ability to work independently and take ownership of assigned engineering activities.
• Strong attention to detail and the ability to manage multiple priorities.
• Collaborative approach and willingness to work across organizational functions.
• Initiative in identifying security weaknesses and recommending improvements.
• Clear, practical, and action-oriented communication style.
• Commitment to continuous learning and professional development.
• Curiosity about emerging cybersecurity, cloud, automation, and AI technologies.
• Adaptability and the ability to operate effectively in a dynamic SaaS technology environment.
• Commitment to responsible AI use, human oversight, and protection of sensitive information.