Job description

Overview

Security Engineer II responsible for improving vulnerability management and risk intelligence through cloud-native solutions, automation, and data-driven prioritization. The role covers vulnerability identification, exploitability assessment, remediation workflows, and security service operations across cloud, application, infrastructure, and identity environments.

What you'll do

Prioritize vulnerabilities and make security risk decisions across multiple environments.
Analyze vulnerability, threat intelligence, and exposure data for exploitability and business impact.
Design and implement automation for vulnerability identification, triage, ownership, and remediation.
Deploy and operate reliable, scalable, observable cloud-native security services.
Validate code, recommendations, and remediation actions from automation and AI-assisted tools.
Produce risk metrics and leadership-ready narratives on remediation effectiveness.
Participate in risk assessments, incident guidance, and an on-call rotation.

What you'll need

2+ years of experience in vulnerability management, security engineering, cloud security, security operations, risk assessment, or related disciplines.
Bachelor's degree in Computer Science, Information Security, Engineering, or equivalent practical experience.
Understanding of AWS, Azure, or GCP and modern application architectures.
Experience supporting or operating applications and services in cloud environments.
Knowledge of systems architecture, APIs, data flows, service integrations, and distributed systems.
Scripting or programming experience with Python, PowerShell, Go, Java, or similar tools.
Strong analytical, troubleshooting, problem-solving, and communication skills.

Nice to have

Experience with containers, Kubernetes, serverless platforms, or Infrastructure as Code.
Experience operating security automation or vulnerability management platforms.
Familiarity with AI-assisted development, intelligent automation, or agentic AI concepts.
Experience with observability, monitoring, logging, resiliency, and operational excellence.

Details