Cyber Security Engineer II

• The Cyber Security Engineer II will join the Cybersecurity Operations Center with 13 people, half analysts, half engineers for a hands-on AI focused engineering position.
• This team is currently continuing to integrate new SIEM with multiple platforms and roll out new AI security initiatives, * Detection catalog in production: Publish an AI threat detection catalog mapped to telemetry sources and deploy an initial prioritized detection set with a monthly tuning cadence.
• Faster, cleaner triage: Reduce repeat false positives and improve time-to-triage/time-to-escalation for AI-related alerts through enrichment and tuning.
• Monitored guardrails: Stand up baseline monitoring and anomaly thresholds for approved AI tools and deliver recurring executive-ready reporting on risky usage patterns and remediation.
• Validated response capability: Publish AI-focused IR runbooks and validate via tabletop exercises; feed lessons learned into playbooks and detection tuning.

• Understanding of GitHub or Gitlab, and CICD pipelines
• Security operations/detection engineering/IR experience with SIEM/SOAR workflows; automation/scripting skills (e.g., Python, KQL/SPL).
• Working knowledge of AI/ML risk patterns (prompt injection, data leakage, and over-trust of outputs).
• Communication and leadership skills. Will be working across teams that include execs, architects, senior technical staff

Required Education:

• Bachelor’’s degree in Computer Science, Information Technology or other job-related degree;
• OR 4 years of job-related work experience;
• OR 2 years of job-related experience plus an associate’s degree in Computer Science, Information Technology or other job-related degree.

Required Work Experience:

• 6 years of job-related technical experience.

Required Software and Other Tools:

• Advanced proficiency with applicable IT Security tools (software and hardware)
• Microsoft Office

Preferred Qualifications:

• Previous network engineer experience
• Previous SOC analyst/engineer experience
• Certifications related to AI/Machine Learning

Preferred Work Experience:

• Experience in network security (Cisco ASA, IPS, VPN, RSA SecurID, PKI, cryptography), security controls for LAN/WANs, client servers, web-based systems, and databases.
• Experience with configuration of security devices such as firewalls, intrusion prevention, patch deployment, and risk assessment/ vulnerability scanners.

Preferred Licenses and Certificates:

• CISA, CISM, CISSP