Lead Security Engineer-W2-ONSITE INTERVIEW

Job Title: Lead Security Engineer 
Work Location: Fort Worth, TX
Education/Experience Required: Bachelor's degree in Information Security, Computer Science, a related discipline, or equivalent practical experience; 8 years of progressive experience in cybersecurity, security operations, or a similar function
Job Description & Responsibilities :

• The Lead Security Engineer serves as a skilled, hands-on security professional focused on Level 3 security operations, incident response, and ownership of key platforms across Microsoft security tools and related technologies.
• This position goes beyond initial alert review by managing investigations, supporting coordinated response efforts, overseeing security platforms, and helping resolve risks across endpoint and identity environments.
• The SE2 partners with the Security Manager and CISO to strengthen security operations and provides guidance to Level 1 Security Engineers.
• This role also contributes to the alignment of cyber and physical security by supporting oversight of IP-based physical security systems in partnership with the Physical Security team.

Security Operations & Incident Response (L2):

• Manage investigation, containment, and remediation efforts for incidents escalated by Level 1
• Conduct in-depth analysis of endpoint, identity, and cloud security signals
• Assist with incident records, summaries, and required reporting
• Work with Infrastructure, IAM, and other IT groups to coordinate response activities

Security Tools Responsibilities and Knowledge:

• Administer and support security tools and related operational processes
• Refine configurations to improve accuracy and effectiveness
• Research and validate security events, alerts, and findings
• Enhance rule performance and signal quality for the following areas:
  • Microsoft Security Platform
  • Web Application Firewall (WAF) Operations
  • Data Loss Prevention Operations
  • Asset Management Operations
  • Identity and Access Management Operations

Endpoint, Platform Security & Remediation:

• Lead remediation work across endpoint devices and security platforms
• Respond to endpoint and platform-related security events
• Collaborate with IT teams to apply security controls, hardening practices, and standards

Cyber / Physical Security Coordination:

• Support technical security governance for IP-based physical security solutions, including:
  • Network-connected cameras
  • Access control systems
  • Genetec platform
• Partner with the Physical Security team to help ensure:
  • Secure network design and configuration for physical security systems
  • Proper identity and access safeguards
  • Consistency between cybersecurity controls and physical security operations

Operational Maturity & Mentorship:

• Coach and support Security Engineer 1 (L1) team members
• Help develop security runbooks, operating procedures, and standards
• Identify opportunities to improve security tools, workflows, and operational practices
• Assist with metrics gathering and operational reporting

Skills & Qualifications :

• Bachelor's degree in Information Security, Computer Science, a related discipline, or equivalent practical experience
• 3–6 years of progressive experience in cybersecurity, security operations, or a similar function
• Practical experience supporting incident response and security investigations
• Strong analytical, troubleshooting, and investigative capabilities
• Ability to guide and mentor junior security engineers
• Solid understanding of modern security concepts, including identity-focused security, endpoint protection, network segmentation, and cloud security
• Effective written and verbal communication skills
• Ability to perform well in a fast-paced operational security setting
• Experience owning or supporting Akamai WAF operations

Preferred Knowledge & Skills (Including AI):
AI / LLM Knowledge

• General familiarity with Artificial Intelligence (AI) and Large Language Models (LLMs)
• Awareness of AI-related security considerations, such as:
  • Data leakage and prompt-driven risk scenarios
  • Potential misuse or abuse of AI systems
  • AI-enabled social engineering and phishing techniques
  • Safe-use guidelines, guardrails, and user enablement practices

Preferred Certifications:

• Relevant Microsoft Security certifications
• CISSP, GIAC, or comparable mid-level cybersecurity certifications

Career Progression Alignment:

• Security Engineer 1 (SE1): Alert triage, vulnerability support, patching assistance, and documentation
• Security Engineer 2 (SE2): Incident response leadership, security platform ownership, and remediation execution
• Security Manager: Microsoft security operations leadership, people management, and execution accountability