IT Security Engineer II

Exemption Status United States of America (Exempt)

Salary $110,982 - $155,376 - $199,769

Position Information Security Engineer II

The Information Security Engineer II develops, executes, and monitors enterprise-wide information security from policy through implementation across all security departments including SECOPS, DEVSECOPS, and Threat Analytics. This role includes direct security support for corporate subsidiaries, ensuring that business information remains secure from unauthorized access, inappropriate alteration, and physical threats. The engineer serves as the process owner for all ongoing security activities and is responsible for protecting the confidentiality and integrity of client, employee, and proprietary business information in accordance with federal and state laws and regulations.

• Enforce security policy and support security procedures, applications, and systems through documentation and resolution of cases ranging from simple to complex. Recommend changes to existing processes.
• Utilize Endpoint Threat Detection and Response/Hunting toolsets.
• Create requirements for product evaluations and procedures to enhance productivity and effectiveness; provide direct support to business and IT staff on security issues.
• Drive delivery of new and upgraded security applications, systems, and workflows; test new systems for effective operation.
• Lead efforts to proactively maintain and improve the automation, reliability, consistency, and quality of existing IT security tools and environments. Assist in the design, deployment, integration, and configuration of security solutions.
• Ensure confidentiality, integrity, and availability of data on or transmitted through enterprise workstations, servers, application systems, and data repositories.
• Initiate, facilitate, and promote information security awareness activities; disseminate and educate users on policies and practices. Participate in regular security awareness training.
• Work cross‑functionally with internal business units and stakeholders to support business needs; track and document security service requests and completed cases using an automated system.
• Participate in daily activities and reporting required for regulatory and contractual information security obligations; coordinate tasks for security updates and initiatives.
• Participate in security incident investigations; communicate findings to security management. Identify root causes, propose solutions, and close out investigations.
• Maintain up‑to‑date industry knowledge through formal and informal training, industry associations, and research of emerging technologies critical to information security.
• Keep management aware of security issues; handle and/or escalae appropriately.
• Provide guidance and training to less experienced staff.
• Provide IT security consultative support to internal and external clients.
• Manage IT security related projects and assignments as assigned.

No supervisory responsibilities.

Internal and external client‑facing role requiring excellent customer service and interpersonal communication skills. Manage difficult or emotional client situations, respond promptly to client needs, solicit feedback, and meet client commitments.

B.S./B.A. and 8+ years of experience or equivalent combination, with 4 years as a subject‑matter expert.

Knowledge of Microsoft Office Suite.

• Endpoint Management (Big Fix, WSUS/SCCM, Symantec, Trend Micro, etc.)
• Identity and Access Management
• Certificate Management
• Patch Management (Windows and Unix)
• Intrusion Detection and Prevention
• Security Awareness Training
• Mobile Device Management
• EDR (Endpoint Detection and Response)
• Web Content Filtering
• Device Encryption
• Vulnerability Assessment Tools
• Firewall and VPN
• Secure E‑mail, Anti‑SPAM
• Web Server Applications
• Web API Service Security
• Business Continuity (Disaster Recovery)
• Compliance and Audit (HIPAA, HITRUST, SOC, GovRAMP, PCI)
• OS Administration (Windows, Linux, Unix)
• Authentication and SSO
• Container Security

• Security certification strongly preferred.
• OWASP, ISSA, or ISACA membership a plus.

• Composure
• Decision Quality
• Organizational Agility
• Problem Solving
• Customer Focus
• Drive for Results
• Peer Relations
• Time Management
• Dealing with Ambiguity
• Learning on the Fly
• Political Savvy

• Medical, Dental, Vision, Wellness Programs
• Paid Time Off, Company Paid Holidays
• Incentive Compensation
• 401(k) with Company Match
• Life and Disability Insurance
• Tuition Reimbursement
• Employee Referral Bonus

Male/Female/Disabilities/Veterans

The above statements describe the general nature and level of work performed by people assigned to this classification and are not intended to constitute an exhaustive list of all responsibilities, duties, or skills required.