Security Engineer II

Overview

The Security Engineer II is a senior technical contributor responsible for leading security initiatives, complex investigations, and security improvement projects across cloud and enterprise environments. This role focuses on engineering, optimization, and escalation handling, while mentoring junior engineers and driving security maturity forward.

• Lead and execute security engineering projects, including design, deployment, and optimization of security controls
• Serve as an escalation point for complex security incidents and advanced threat investigations
• Engineer and maintain security solutions across cloud environments, with a strong focus on Microsoft platforms
• Design, develop, and optimize advanced detections and queries within SIEM and EDR platforms
• Perform proactive threat hunting and analysis across endpoint, identity, email, and network telemetry
• Architect and improve integrations between security tools and cloud services
• Own and improve security tooling, including:
  • EDR platforms
  • SIEM solutions
  • Secure Email Gateway technologies
  • Web proxy and web filtering solutions
  • Privileged Access / Privilege Management solutions
• Drive improvements in incident response processes, automation, and response playbooks
• Collaborate with infrastructure, cloud, and identity teams on secure design and implementation
• Mentor Security Engineer I staff and provide technical guidance and knowledge sharing
• Contribute to security strategy, roadmap planning, and risk reduction initiatives

• 5+ years of experience in information security or security engineering roles
• Strong experience securing cloud environments (Microsoft preferred)
• Advanced hands-on experience with EDR, SIEM, and threat detection engineering
• Strong query and data analysis skills (KQL, SPL, SQL, or similar)
• Proven experience handling complex security incidents and escalations
• Solid understanding of identity, networking, endpoint, and cloud security concepts

• Deep experience with Microsoft Defender, Sentinel, Entra , and Azure security controls
• Experience leading or delivering security projects from design through implementation
• Familiarity with automation and scripting (Power Shell, Python, Logic Apps, SOAR)
• Relevant certifications (e.g., AZ-500, SC-200, SC-100, CISSP) a plus