Security Engineer II

This is a fully remote position, open to applicants in United States.

📋 Description

• Develop, implement, and maintain security solutions encompassing email security, network security, firewall management, endpoint protection, and vulnerability management.

• Design, configure, and provide support for firewalls, virtual private networks, intrusion detection/protection systems, and zero-trust architecture.

• Analyze real-time network traffic and investigate security alerts.

• Execute incident management activities in collaboration with Coinstar’s managed defense partner.

• Conduct regular security audits, risk assessments, and penetration testing.

• Enforce security policies and ensure compliance with SOC 2 Type II requirements.

• Manage email security controls and respond to potential phishing incidents.

• Assist in conducting phishing tests.

• Oversee endpoint protection services, including patch management, incident response, and mobile device management.

• Address vulnerabilities across relevant layers, prioritizing based on severity and impact.

• Enhance monitoring and alerting capabilities utilizing Coinstar’s observability solutions.

• Engage in technical design reviews and security assessments throughout project execution.

• Respond to third-party risk assessment questionnaires.

• Provide off-hour support as necessary.

• Collaborate with team members to support evolving identity services and data protection services.

⛳️ Requirements

• Bachelor's degree in Computer Science, Engineering, or a related field is required.

• An advanced degree is preferred.

• A minimum of 3 years of experience in security engineering roles.

• At least 2 years of experience with Microsoft Azure native security and networking.

• GSEC certification is preferred.

• Microsoft certifications such as AZ-500 and/or SC-900 are desired.

• Experience with Okta enterprise authentication is desired.

• Familiarity with Auth0 consumer authentication is desired.

• Experience in SOC 2 Type II controls and related audits is a plus.

• Proficiency in PowerShell and Python 3.

• Practical knowledge of system security, focusing on Linux, Windows, and network devices.

• Understanding of Terraform or similar infrastructure as code (IaC) tools.

• Strong grasp of contemporary security controls and advanced persistent threat defenses.

• Knowledge of feeding relevant logs to SIEM for event management.

• Experience in investigating SIEM alerts to determine necessary responses.

• Familiarity with techniques for modern threat hunting.

• Ability to evaluate and configure network traffic for route optimization, security issues, and packet loss.

• Minimal to no travel is required.

🏝️ Benefits

• Three medical plan options.

• Dental and vision insurance.

• Short- and long-term disability insurance.

• Life insurance.

• Traditional and Roth 401(k) plans with immediate vesting company match.

• PTO accrual starting at 18 days per year.

• 10 company holidays and 2 floating holidays each year.

• Paid parental and adoption leave.

• Corporate matched giving program.

• Employee assistance program.

• Casual and flexible work environment.

• Options for remote work.

• Potential for base salary increase up to $175,963 annually based on ongoing performance.

• Short-term incentives based on both company and individual performance.