Security Engineer II

The Job

The Security Engineer II will help design, build, and scale the security foundations of our products, infrastructure, and engineering systems. This is a hands-on technical role for an engineer who can move across software development, network security, cloud and infrastructure security, and security architecture while partnering closely with engineering teams to identify risk and build practical, durable solutions.

You will strengthen security through engineering, writing production-quality code, improving platform controls, automating security processes, shaping secure architecture, and embedding strong practices into the software development lifecycle. The ideal candidate combines deep security judgment with strong software engineering fundamentals and can improve security without creating unnecessary friction for developers or slowing product velocity.

Responsibilities

• Design, implement, and maintain security controls across applications, cloud infrastructure, corporate networks, and internal engineering systems.

• Partner with engineering and infrastructure teams to perform threat modeling, architecture reviews, and security assessments for new products, services, and critical systems.

• Build security tooling, automation, and guardrails that improve vulnerability detection, prevention, remediation, and developer self-service.

• Develop and operate SASE, Zero Trust, VPN, and secure remote-access capabilities using identity, device posture, least privilege, and application-level access controls.

• Strengthen foundational cloud and platform security controls, including IAM, secrets management, CI/CD security, workload protection, logging, and secure configuration.

• Assess and mitigate security risks associated with AI-enabled applications, agents, models, APIs, and third-party AI platforms, including prompt injection, data leakage, insecure tool use, and unauthorized actions.

• Develop security controls and engineering standards for AI systems, including model and data access, input/output validation, sensitive data protection, monitoring, isolation, and abuse prevention.

• Investigate security incidents and anomalous activity, support incident response and root-cause analysis, and translate findings and emerging threats into durable improvements to security architecture and engineering practices.

• Professional communication directly within the team as well as with co-workers/ teammates and leaders across the organization.

• Foster open, respectful, and professional communication directly within the team as well as with co-workers/ teammates and leaders across the organization.

• Performs other duties as assigned.

Qualifications

• Bachelor’s degree in Computer Science, Computer Engineering, Mathematics, or a related field preferred; 5+ years of Information Security experience may be considered in lieu of a degree.

• Strong software engineering and programming skills, with the ability to develop production-quality code in languages such as Python, Go, Java, C, or C++.

• Extensive hands-on experience across cloud, application, system, and network security, including AWS, Azure, or GCP; IAM; network segmentation; access controls; firewalls; IDS/IPS; secure architecture; code reviews; vulnerability management; and secure development practices.

• Deep technical expertise in at least two of the following areas: application security, system security, network security, authentication and authorization, or cryptography.

• Experience designing and implementing security solutions in complex, multi-tenant environments, including network architecture reviews, threat assessments, and security-focused design decisions.

• Proven ability to conduct threat modeling, identify and assess risks, perform security reviews for mission-critical services, and develop effective mitigation strategies.

• Experience building security automation, tools, and scalable security controls to improve operational efficiency and reduce manual effort.

• Strong incident response and security operations experience, including investigating security events, driving remediation efforts, and implementing long-term security improvements.

• Excellent written and verbal communication skills, with the ability to influence engineering teams, communicate technical risks to technical and executive stakeholders, and make sound decisions in ambiguous situations.

• Self-motivated and able to work independently with a high degree of autonomy while thriving in a fast-paced environment.

Reports To
Senior Director, Information Security

Location

Remote. To be considered for this role, you must reside near the following locations: Miami, FL, Austin, TX, Pecos, TX, Denton, TX, Muskogee, OK, Grand Forks, ND, Calvert City, KY, Marble, NC, Dalton, GA or Auburn, AL