IT Security Engineer II

Required Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or a related technical discipline (or equivalent combination of education and experience).
• Minimum 3+ years of cybersecurity experience as a Security Analyst or Security Engineer.
• Experience administering and supporting enterprise security applications such as Vulnerability Management, Privileged Access Management (PAM), SIEM, Endpoint Security, DLP, and Email Security platforms.
• Experience leading cybersecurity projects and cross-functional initiatives.
• Ability to independently manage multiple priorities with minimal supervision.
• Strong knowledge of cybersecurity principles, frameworks, and best practices.
• Experience designing and implementing enterprise security solutions.
• Advanced incident investigation and threat analysis skills.
• Working knowledge of network, application, cloud, and infrastructure security.
• Excellent communication and stakeholder management skills.
• Strong project management and organizational abilities.
• A collaborative mindset with the ability to mentor others and influence security best practices.

Core Security Technology & Domain Experience

• Cloud Security: Microsoft Azure, CSPM, CNAPP
• Security Operations: SIEM, SOAR, Threat Detection & Exposure Management, Security Incident Response
• Endpoint Security: EDR/XDR, Data Loss Prevention (DLP)
• Identity & Access Security: Identity & Access Management (IAM), Privileged Access Management (PAM)
• Infrastructure Security: Network, Server, Desktop, Database, Cloud & Application Security
• Vulnerability & Risk Management: Vulnerability Management, Risk Assessments, Security Governance
• Enterprise Security: Security Architecture, Enterprise Security Controls, Asset Inventory & Configuration Management
• System Security: System Hardening, IDS/IPS

Preferred Qualifications

• Advanced, professional, or expert-level cybersecurity certification (CISSP, GIAC, CCSP, or similar).
• Healthcare industry experience or experience working within highly regulated environments.
• Experience administering and supporting one or more of the following enterprise security technologies is highly desired. Comparable technologies will also be considered.

o Data Loss Prevention: CrowdStrike Falcon, CrowdStrike DLP, or comparable EDR/DLP platforms

o Vulnerability Management: Tenable Security Center, Qualys

o Privileged Access Management (PAM): Delinea (or comparable PAM solutions such as CyberArk or BeyondTrust)

o Email Security: Proofpoint Email Protection (or comparable secure email gateway solutions)

o SIEM: Sumo Logic SIEM (or comparable SIEM solutions)

What You'll Do

• Lead complex cybersecurity incident investigations, response, and recovery efforts.
• Identify security threats and vulnerabilities and implement effective remediation strategies.
• Architect, design, implement, and enhance enterprise security technologies and processes.
• Administer, monitor, troubleshoot, and optimize multiple enterprise security platforms.
• Serve as the primary administrator and technical owner of the CrowdStrike DLP platform, including ongoing administration, policy management, optimization, troubleshooting, and enhancements to strengthen enterprise data protection.
• Drive automation of security operations to improve efficiency and reduce organizational risk.
• Develop and maintain enterprise security policies, standards, procedures, and operational documentation.
• Create both short- and long-term security technology roadmaps and business cases.
• Conduct security reviews, risk assessments, and impact analyses for new and existing systems.
• Develop, audit, and enhance enterprise security controls across on-premises and cloud environments.
• Measure and report on enterprise security capabilities using automated and manual tools.
• Collaborate with IT and business leaders to promote security awareness and best practices.
• Support internal and external audits, compliance initiatives, and regulatory assessments.
• Assist with HIPAA, PCI, NIST, and other security and compliance requirements.
• Cross-train team members and mentor peers on operational processes and security technologies.
• On-call participation in a rotating 24/7 schedule supporting enterprise security operations.