Security Engineer II - CSIR

Security Engineer II – Cybersecurity Incident Response

The Security Engineer II is a front-line member of the Cybersecurity Incident Response team responsible for protecting corporate technology assets. The Engineer II will assist in developing security solutions, maintaining documentation and system lifecycle of those solutions. This position utilizes multiple complex tools to analyze, detect, and troubleshoot security situations.

This is a Compressed Schedule position working a 4 days/10 hours shift.

• Engineer, implement, administer, and monitor security measures for the protection of computer systems, networks and information.
• Prepare and document standard operating procedures and protocols.
• Configure and troubleshoot security tools and/or devices.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Participate in security investigations and incident response duties as assigned.
• Write, follow, and improve incident response playbooks.
• Write comprehensive reports including assessment-based findings, outcomes, and propositions for further system security enhancement.
• Collaborate across team boundaries to share information and solve complex problems.
• Coordinate planned change windows, peer review, and basic change control including analyzing results and process improvement opportunities.
• Help monitor for security events and determine and execute appropriate response strategies.

• Solid understanding how to identify and prioritize security incidents and elevate to management or other team members.
• Solid understanding of end‑user technology and proven troubleshooting skills.
• Ability to systematically assess a problem or situation to accurately identify probable causes and solutions.
• Solid understanding of a broad range of IT disciplines that would impact overall security posture.
• Proficiency in relating complex technical situations to non‑technical customers.
• Ability to multi‑task and effectively prioritize work streams.

• Minimum required:
  Bachelor’s degree in computer science, information systems, cybersecurity, or related field, or equivalent experience.
• Minimum required: 2+ years’ experience in an information technology or information security role.
• Preferred:
  Experience with ticketing systems; monitoring, logging, and endpoint security tools; SIEM/UEBA platforms; reporting and technical documentation tools; and incident response methodologies.

• Minimum required:
  None.

• Proficient in Microsoft 365 (Excel and Outlook).
• Hands‑on experience in security systems, including firewalls, intrusion detection systems, endpoint detect response, anti‑virus and anti‑malware software, authentication systems, SIEM/UEBA tools, content filtering, etc.
• Solid understanding of IP‑based networking and networking components, including monitoring tools.

We offer an entrepreneurial environment, comprehensive benefits package to include health, dental and vision care, 401(k), wellness initiatives, life insurance, and paid time off.

Stifel is an Equal Opportunity Employer.