Cyber Security Engineer II

Agilysys•Alpharetta, GA

4d•Onsite

About The Position

The Cyber Security Engineer II implements, maintains, and improves security technologies, controls, and processes that protect the organization’s infrastructure, cloud environments, applications, and sensitive information. This hands-on role supports security engineering, cloud security, vulnerability management, security automation, incident response, and emerging cybersecurity threats. The engineer independently manages moderately complex security initiatives, troubleshoots security technologies, and collaborates with IT, Product Security, Cloud Engineering, Infrastructure, and Development teams to strengthen the organization’s security posture. The role supports responsible adoption of AI in cybersecurity operations, using approved technologies to improve efficiency, threat detection, investigations, and automation. It also helps protect an organization expanding its cloud, SaaS, automation, and AI-enabled capabilities by keeping security controls effective, scalable, and aligned with evolving technologies and threats. This is a full-time, in-office position for local candidates only, with participation in an incident on-call rotation.

Requirements

Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience.
Four or more years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline.
Demonstrated experience with enterprise security technologies and investigating technical security issues.
Experience collaborating with infrastructure, IT, security, or engineering teams.
Intermediate knowledge of cybersecurity concepts, security architecture, defense-in-depth principles, and common security controls.
Hands-on experience implementing, administering, or troubleshooting enterprise security technologies.
Working knowledge of EDR/XDR, SIEM, vulnerability management, identity and access management, or cloud-security platforms.
Understanding of common vulnerabilities, attack techniques, threat actors, and security-assessment methodologies.
Familiarity with incident-response processes, security investigations, and log analysis.
Ability to independently troubleshoot moderately complex security issues with minimal supervision.
Experience evaluating security risks and recommending practical mitigation measures.
Familiarity with cloud infrastructure and security concepts in AWS, Microsoft Azure, or Google Cloud.
Understanding of networking fundamentals, operating-system security, authentication, authorization, and encryption.
Familiarity with cloud-security configurations, workload protection, and identity management.
Basic-to-intermediate scripting experience using Python, PowerShell, Bash, or similar technologies.
Experience working with APIs, system integrations, or security-automation tools.
Ability to interpret technical documentation, security findings, and system-generated reports.
Familiarity with generative AI, large language models, AI-assisted analysis, and their practical use in cybersecurity.
Awareness of AI security risks, including prompt injection, model misuse, data leakage, insecure integrations, and unauthorized access.
Understanding of responsible AI use, protecting sensitive information, and independently validating AI-generated output.
Ability to translate manual security tasks into repeatable, automated workflows.
Effective written and verbal communication skills, including presenting technical information to technical and nontechnical stakeholders.
Must be willing to complete license applications, background checks, security checks, and other required documentation, and provide identification documents required by governmental agencies to maintain compliance and perform the role.

Nice To Haves

Experience working in a SaaS, cloud-native, or enterprise technology organization.
Experience with public-cloud security technologies, container security, or automated infrastructure security controls.
Experience developing security automation or integrating security technologies through APIs.
Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies.
Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP.
Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials.

Responsibilities

Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments.
Support endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies.
Troubleshoot security-tool configurations, integrations, performance issues, and operational failures; evaluate alerts and tool outputs to improve security effectiveness.
Implement security controls and configuration standards, assist with testing and deploying new technologies, and monitor control effectiveness.
Implement and maintain security controls across public, government, and segmented cloud environments, as applicable.
Partner with Cloud Engineering and Infrastructure teams to address cloud misconfigurations, excessive permissions, exposed services, and insecure configurations.
Support cloud security posture management, workload protection, configuration compliance, workload hardening, and secure baselines, including CIS benchmarks.
Participate in security reviews of infrastructure changes and cloud services; validate curated container images, approved software libraries, and standardized infrastructure configurations.
Perform security assessments, configuration reviews, vulnerability analyses, and security testing; support remediation and verification with partner teams.
Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms; validate remediation and document risks and recommendations.
Monitor emerging vulnerabilities, threat-actor techniques, and security advisories.
Use approved AI-enabled security tools, generative AI, and AI coding assistants for troubleshooting, analysis, security scripting, detection logic, and documentation; evaluate generated recommendations and maintain human oversight.
Assist in evaluating and addressing risks involving AI applications, agents, large language models, third-party AI services, prompt injection, sensitive-data exposure, excessive permissions, insecure integrations, and unauthorized access.
Support monitoring and investigation of security events involving AI applications and connected services, and help enforce requirements for AI usage, data handling, access controls, and secure integration.
Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms.
Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification; troubleshoot integrations and document workflows and procedures.
Provide security-engineering assistance during incidents, including log analysis, troubleshooting, control validation, containment, detection improvements, and remediation.
Partner with Security Operations to improve alert quality and response effectiveness; participate in post-incident reviews, corrective actions, and the incident on-call rotation.
Conduct periodic security assessments, control reviews, and technical validation; support applicable NIST, CIS, SOC 2, PCI DSS, and FedRAMP initiatives.
Maintain technical standards, procedures, configuration documentation, and runbooks; gather audit evidence and document risks, findings, remediation, and control improvements.
Collaborate with Security Operations, Product Security, Cloud Engineering, IT, Infrastructure, and Development teams; provide technical guidance and communicate risks and recommendations.
Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives.