Security Engineer II

Utah-based hybrid position which will require some regular in-office days each week. Employment with Bamboo

HR is contingent on passing both a background and credit check.

At Bamboo

HR, we are focused on leveraging AI to streamline workflows and free people to do great work. We seek curious, forward-thinking people who want to explore how AI can elevate their work and help reimagine the future of HR.

Security enables trust, innovation, and great employee experiences. As a Security Engineer II, you will help protect Bamboo

HR s systems, data, and people by building and improving security capabilities across a modern, cloud-first environment. You will partner with teams across engineering, infrastructure, IT, compliance, and security operations to reduce risk, strengthen controls, and support secure business growth. You will contribute across security domains including cloud security, incident response, detection and monitoring, security tooling, governance support, and emerging technology risk such as Agentic AI.

This role suits someone who takes ownership, collaborates well, and leads from where they are to drive practical security outcomes.

• Design, implement, and maintain security controls that protect Bamboo
  
  HR systems, infrastructure, users, and data.
• Support security across a cloud-first, API-driven, and modern technology environment, including cloud platforms, SaaS systems, identity systems, endpoints, and containerized services.
• Conduct security assessments and risk reviews for systems, processes, and emerging technologies, including AI-enabled and Agentic AI use cases.
• Assist with security incident response efforts, including investigation, containment, remediation, and follow-up improvements.
• Monitor and improve security telemetry, alerting, and detection capabilities to identify and respond to threats.
• Automate repetitive security tasks and improve workflows through scripting, integrations, dashboards, or tooling enhancements.
• Own defined security control or policy areas end-to-end, updating standards to align with regulatory requirements, company priorities, and industry best practices.
• Partner with engineering, IT, compliance, and other stakeholders to ensure security measures support business objectives while maintaining strong risk management.
• Serve as a security advocate and trusted resource to partner teams by providing practical guidance, education, and support.
• Contribute technical input to governance, risk, and compliance initiatives, including audits, control reviews, and risk register activities.
• Help define and execute security initiatives by tracking work, managing dependencies, and contributing to successful project delivery.
• Stay current on evolving threats, security practices, and new technologies, and recommend improvements that strengthen Bamboo
  
  HR s security posture.
• Deliver measurable improvements in areas such as cloud security, detection and alerting, incident readiness, identity and access management, endpoint posture, or AI risk management.
• Contribute to incident response and drive corrective actions for identified gaps.
• Improve efficiency or visibility through automation, reporting, or tooling enhancements.
• Build trust with partner teams through consistent communication, sound judgment, and practical security guidance.
• Support a culture of continuous improvement by documenting processes, sharing knowledge, and coaching others as appropriate.

• 2–5 years of experience in security engineering, security operations, infrastructure security, cloud security, IT security, or a related cybersecurity role.
• Bachelor s degree in Cybersecurity, Computer Science, Information Systems, or a related field preferred.
• Experience across multiple security domains such as cloud security, identity and access management, vulnerability management, incident response, endpoint security, detection and monitoring, governance support, or infrastructure hardening.
• Working knowledge of modern technical environments, including cloud platforms, SaaS applications, APIs, endpoints, and identity systems.
• Experience assessing security risk, recommending…