Security Engineer II

At Flynn Group, we believe in the power of collaboration and value in-person interactions. This is why our employees work from the office four days per week
, leaving Fridays to work from home. This setup cultivates casual conversations, problem-solving, and trusted relationships. Our goal is to create an environment where innovation thrives, with office-based teams coming together four days a week to collaborate and thrive, together!

The Senior Security Engineer is responsible for strengthening Flynn Group’s cyber defense posture across infrastructure, endpoint, cloud, identity, and network environments. This role designs and maintains security hardening standards, supports incident response and security investigations, leads purple-team and tabletop exercises, manages remediation risk tracking, and partners with technology and business teams to assess security risk in new solutions. The ideal candidate is a hands‑on security engineer who can operate security tools, translate technical risk into business impact, and drive practical remediation across a distributed enterprise environment.

• Develop, maintain, and continuously improve security hardening standards for servers, endpoints, networks, cloud services, and identity platforms.
• Partner with IT and business technology teams to embed secure configuration and least-privilege principles into new and existing solutions.
• Assist with security reviews of key enterprise platforms, tools, and technologies.

• Operate, tune, and improve security platforms such as EDR, antivirus, email security, SIEM, vulnerability management, and related monitoring tools.
• Investigate cybersecurity incidents, document findings, coordinate remediation, and elevate risks based on business impact.
• Develop and improve detection, alerting, response, and remediation playbooks.

• Lead or coordinate tabletop exercises, attack simulations, penetration testing follow-up, and other purple-team activities.
• Manage honeypot/deception capabilities and use findings to improve detection, response, and control effectiveness.
• Track remediation of security findings from testing, audits, vulnerability scans, and incident reviews.

• Maintain a security risk roster, document remediation options, and communicate risk clearly to technical and business stakeholders.
• Review new business and technology solutions for security risks, including third-party/vendor risk and AI-related risks.
• Contribute to security policy, standards, audit evidence, and control documentation.

• 5+ years of experience in cybersecurity, security engineering, infrastructure security, incident response, vulnerability management, or related disciplines.
• Hands-on experience with security tools such as EDR, SIEM, email security, vulnerability management, endpoint management, or firewall/security platforms.
• Experience identifying, documenting, prioritizing, and driving remediation of security risks.
• Strong written and verbal communication skills, including the ability to explain technical risk to non-technical stakeholders.

• Experience with Industry Leading EDR solutions, Cloud Security Principles, Industry leading Firewall technology, & Sentinel SIEM.
• Experience with tabletop exercises, penetration testing coordination, red-team/purple-team activities, adversary simulation, or detection engineering.
• Familiarity with NIST CSF, MITRE ATT&CK, ISO 27001, or similar frameworks.
• Experience assessing third-party/vendor security risk and AI-enabled business solutions.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Systems, or equivalent experience.
• Security certifications such as CISSP, Security+, CySA+, GCIH, GCIA, GCFA, CEH, PNPT, or OSCP.

• Retirement and Savings Plan
• Short- and Long-Term Disability
• Basic Life Insurance
• Voluntary Life Insurance
• Tuition Reimbursement
• Paid Time Off
• Flexible/Hybrid Work Schedules (In Office Monday - Thursday, Work from Home Friday)
• Company Outings
• Dining Discounts
• On-Site Fitness Center

The Flynn Group is an Equal Opportunity Employer