Security Engineer II

This is a fully remote position, open to applicants in United States.

📋 Description

• Conduct real-time monitoring and analysis of security incidents while managing security tools.

• Collaborate closely with Security, Infrastructure, DevOps, and Engineering teams to enhance the security of cloud and infrastructure environments.

• Execute IAM and access-control assessments across AWS, Azure, and GCP, which include audits of roles, permissions, service accounts, and privileged access.

• Carry out security configuration and posture evaluations across commercial AWS, Azure, and GCP environments, covering AWS GovCloud and Azure Government settings.

• Perform vulnerability assessments, confirm findings, track remediation efforts, and validate remediation using tools like Tenable/Nessus, OpenVAS, Nmap, and similar technologies.

• Triage, investigate, contain, and respond to security incidents and events across cloud, endpoint, network, and infrastructure domains.

• Conduct incident investigations and root-cause analyses, coordinate remediation efforts, document findings, and assist in post-incident improvements.

• Monitor and analyze security events utilizing SIEM, EDR/XDR, DLP, network security, and other security monitoring technologies.

• Assist in the administration, tuning, and troubleshooting of SIEM, EDR/XDR, DLP, firewalls, IDS/IPS, and vulnerability management solutions.

• Integrate and monitor security logs from Linux and Windows systems, firewalls, IDS/IPS, VPNs, web servers, Kubernetes, and cloud-native services.

• Conduct cloud security reviews encompassing IAM, network security, logging, monitoring, encryption, security groups, storage, and managed cloud services.

• Support DLP controls and investigations involving sensitive, confidential, and regulated data across endpoints, cloud services, email, and other data channels.

• Assist with Kubernetes and container security, including security configuration, RBAC, network policies, image security, and workload monitoring.

• Collaborate with Engineering and DevOps teams to investigate and remediate vulnerabilities in cloud, infrastructure, and security.

• Aid in security assessments and audit activities for regulated and government environments.

• Develop automation scripts to enhance security assessments, incident response, monitoring, reporting, and operational processes.

• Participate in an on-call rotation, providing security support during off-hours and in response to security incidents as needed.

⛳️ Requirements

• A Bachelor’s degree in Information Technology, Computer Science, Cybersecurity, or a related field is preferred.

• 3-5 years of practical experience in roles such as Infrastructure Security, Cloud Security, or Security Engineer.

• Hands-on experience with AWS, Azure, and GCP is essential.

• A strong preference for candidates with experience in securing commercial and government cloud environments like AWS GovCloud and Azure Government.

• Comprehensive understanding of IAM, cloud security controls, network security, vulnerability management, and security monitoring.

• Practical experience in security incident investigation, incident response, reporting, and remediation.

• Familiarity with Kubernetes, Docker, and cloud-native services, particularly in GCP, is preferred.

• Proficient in using open-source security tools and technologies.

• Experience with scripting or automation in Python, Bash, PowerShell, or similar languages is a plus.

• Security certifications such as Security+, CEH, OSCP, or relevant cloud security certifications are desirable.

• Ability to work independently, effectively collaborate with cross-functional teams, and perform well under pressure.

• Strong analytical, troubleshooting, documentation, and communication skills.

• Capability to manage multiple priorities in a 24x7 security operations environment, including on-call support as necessary.

• A sense of curiosity, self-motivation, and a willingness to take ownership of new security challenges and responsibilities.

🏝️ Benefits

• PTO benefit accrual of 20 days per year.

• Parental leave.

• Monetary incentives and recognition for dedication and exceptional performance.

• Medical, dental, and vision benefits.

• 100% company-sponsored short- and long-term disability insurance.

• Basic life insurance.

• Discounted legal aid and pet insurance options.