Cybersecurity Engineer II

Overview Help us safeguard mission‑critical systems and champion a security‑first culture. As our Cybersecurity Engineer II (reporting to the Director of Cybersecurity), you’ll own user‑facing controls, evaluate and implement emerging security technologies, and drive vulnerability management across enterprise environments. You’ll play a central role in risk mitigation and incident response while partnering across the Technology Group to lead high‑impact cybersecurity initiatives and elevate internal awareness.

This role will work fully on-site in Franklin, TN.

• Manage cybersecurity risk identification and mitigation across enterprise systems, networks, cloud, and web environments.
• Assess digital information risk using cybersecurity tools and methodologies; facilitate remediation and provide actionable recommendations to leadership.
• Review cloud toolsets to identify protection gaps and propose appropriate solutions, including cost estimates.
• Identify and implement opportunities for improved reporting, detection, and IR automation.
• Monitor on‑premises and cloud environments using in‑place tools, responding promptly to identified threats or anomalies.
• Identify opportunities to automate incident response to reduce time to remediation.
• Drive remediation efforts stemming from internal/external audits, assessments, or pen tests.
• Identify and recommend improvements to cybersecurity‑related policies, procedures, playbooks and standards.
• Stay current on cybersecurity methodologies and technologies through certification or vendor‑led training.
• Monitor and advise on cybersecurity threats and trends, recommending best defenses to reduce enterprise risk.
• Evaluate asset compliance with cybersecurity policies and make improvement recommendations.
• Serve as project lead for cybersecurity‑specific initiatives.
• Collaborate with senior Technology Group staff to support strategic and tactical projects by offering security best practice guidance.
• Provide application support for both on‑prem and cloud security technologies (e.g., EDR, DLP, SIEM, FIM, IDS/IPS, NGFW, CASB, IAM).
• Manage PCI compliance obligations and implement cybersecurity initiatives that safeguard operational integrity while meeting legal, regulatory, and Ministry standards.
• Analyze and recommend optimizations for security tools and systems, identifying needs that may lead to new projects.
• Partner with technology Team Members to enhance documentation and security‑related processes.
• Respond to cybersecurity incidents and propose or implement mitigation strategies.
• Participate in on‑call rotation as assigned.
• Lead investigations into suspicious or anomalous digital activity.
• Act as a cybersecurity subject matter expert, providing internal mentorship and risk‑related training.

• Bachelor’s degree in computer sciences, or equivalent experience. (IT Administration Support and Cybersecurity experience required)
• Certified Ethical Hacker, Incident Handling Certification, and formal information security education is desired. SANS‑GIAC, ISC2, ISACA or other similar credentials preferred.
• 3‑5 years Cybersecurity or IT experience (emphasis of maintaining Technical Security Controls) with a proven ability to engage with Senior Management and regulators.
• Knowledge of relevant common information security management frameworks (e.g., ISO 27001, NIST CSF, PCI‑DSS, CIS Benchmarks).
• Proven experience in the evaluation, planning g, and implementation of enterprise‑wide Cybersecurity control programs/technologies. These can include but are not limited to:
  Data Loss Prevention, Security Event Management, Global Risk and Compliance Tools, Threat Intelligence, Vulnerability Management, Identity Access Management, Application Security, Computer IR/Forensics.
• Knowledge of technical infrastructure, networks, databases, and systems in relation to Cybersecurity and risk.
• Understanding security best practices in cloud environments such as AWS and Azure.
• Knowledge of cloud security and SIEM administration, Azure Security Center, and Azure Sentinel.
• Basic understanding of Kusto Query Language (KQL) a plus.
• Ability to successfully manage…