Security Engineer II

ESSENTIAL FUNCTIONS

• SOC Engineering – Engineer and enhance Security Operations Center (SOC) capabilities, integrating security monitoring tools, SIEM solutions, and automation workflows in 24x7 mission critical environments.

• Security Operations Enablement – Develop and implement security frameworks and processes that enhance the efficiency of security operations teams in multi-tenant and geographically diverse client environments.

• Endpoint Security Management – Deploy, enhance, and maintain enterprise security solutions to align with best practices to minimize attack surfaces, threats, and security risks within the supported environments.

• Incident Response Support – Work closely with SOC analysts to refine incident detection, investigation, and response capabilities including participation in 24x7 on-call escalation rotations.

• Threat Intelligence Integration – Integrate threat intelligence feeds and analytics to improve proactive threat detection and mitigation.

• Risk Management & Compliance – Ensure security controls comply with industry regulations such as NIST, ISO 27001, and SOC 2 including diligence assessments for new environments and new clients.

• Security Engineering Development – Define and document security reference engineering and best practices for network and cloud environments.

• Automation & Orchestration – Implement automation strategies for security processes, including security policy management and security alert triaging.

• Stakeholder Collaboration – Work with IT, DevOps, and business units to align security policies with operational goals.

• Continuous Improvement – Monitor emerging threats, security trends, and best practices to enhance enterprise security posture.

EDUCATION

• Bachelor's degree in Cybersecurity, Information Technology, or a related field.

EXPERIENCE

• IT Systems Engineering – 4-6 years of experience in engineering enterprise IT platforms.

• Security Engineering – 4-6 years of experience managing and implementing enterprise security solutions.

• SOC Engineering & Security Operations – 4-6 years in SOC engineering, incident response, or security automation.

• Network Security – Proven experience contributing to the design and securing of network platforms, including VPNs, proxies, and IDS/IPS solutions.

• Threat Intelligence & Detection – At least 4-6 years of experience working with SIEM platforms, threat hunting, and endpoint detection response (EDR) solutions.

• Security Design – 4-6 years of experience in security design and implementation.

• Azure Cloud Solutions – Proven expertise in designing and deploying Azure cloud solutions including security.

REQUIREMENTS

• Preferred Certifications – CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, Palo Alto Networks PCNSA/PCNSE, Fortinet FCP/FCSS or equivalent.

• Microsoft – Microsoft Defender Certified preferred.

• Security Management – Certified Information Security Manager (CISM) preferred.

KNOWLEDGE

• Security Operations – In-depth understanding of SOC workflows, log management, and SIEM solutions (Splunk, Sentinel, QRadar, etc.).

• Firewall Technologies – Expertise in firewalls, including Palo Alto, Fortinet, Cisco, or Check Point.

• Cloud Technologies – In-depth understanding of cloud computing principles, serverless architectures, and cloud-native development.

• Cloud Security – Familiarity with cloud security models in AWS, Azure, and Google Cloud.

• Security Standards & Compliance – Knowledge of cybersecurity principles, authentication protocols (OAuth, SAML).

• Regulatory Frameworks – Strong knowledge of compliance standards and best practices such as NIST, ISO 27001, SOC-2, PCI-DSS, HIPAA, and GDPR.

• Automation & Scripting – Experience with Python, PowerShell, or Bash for security automation.

• Continuous Learning Mindset – Passion for staying up to date with industry trends, emerging technologies, and best practices.

SKILLS

• Security Design – Ability to contribute to the design and implementation of secure architectures.

• Security Automation – Proficiency in automating security processes and threat detection workflows.

• Automation & Scripting – Proficiency in PowerShell, Terraform, and ARM templates.

• Project Management – Ability to manage security projects and drive cross-functional initiatives (moderate).