Security Engineering Lead

Education/Experience Required

Bachelor's degree in Information Security, Computer Science, a related discipline, or equivalent practical experience; 3–6 years of progressive experience in cybersecurity, security operations, or a similar function

• The Security Engineer 2 (SE2) serves as a skilled, hands-on security professional focused on Level 2 security operations, incident response, and ownership of key platforms across Microsoft security tools and related technologies.
• This position goes beyond initial alert review by managing investigations, supporting coordinated response efforts, overseeing security platforms, and helping resolve risks across endpoint and identity environments.
• The SE2 partners with the Security Manager and CISO to strengthen security operations and provides guidance to Level 1 Security Engineers.
• This role also contributes to the alignment of cyber and physical security by supporting oversight of IP-based physical security systems in partnership with the Physical Security team.

• Manage investigation, containment, and remediation efforts for incidents escalated by Level 1
• Conduct in-depth analysis of endpoint, identity, and cloud security signals
• Assist with incident records, summaries, and required reporting
• Work with Infrastructure, IAM, and other IT groups to coordinate response activities

• Administer and support security tools and related operational processes
• Refine configurations to improve accuracy and effectiveness
• Research and validate security events, alerts, and findings
• Enhance rule performance and signal quality for the following areas:
• Microsoft Security Platform
• Web Application Firewall (WAF) Operations
• Data Loss Prevention Operations
• Asset Management Operations
• Identity and Access Management Operations

• Lead remediation work across endpoint devices and security platforms
• Respond to endpoint and platform-related security events
• Collaborate with IT teams to apply security controls, hardening practices, and standards

• Support technical security governance for IP-based physical security solutions, including:
• Access control systems
• Partner with the Physical Security team to help ensure:
• Secure network design and configuration for physical security systems
• Proper identity and access safeguards
• Consistency between cybersecurity controls and physical security operations

• Coach and support Security Engineer 1 (L1) team members
• Help develop security runbooks, operating procedures, and standards
• Identify opportunities to improve security tools, workflows, and operational practices
• Assist with metrics gathering and operational reporting