Cybersecurity Engineer II

Love's Travel Stops & Country Stores•Oklahoma City, OK

About The Position

The Cyber Security Engineer II - Security Operations performs hands-on security engineering and operational work of moderate scope to help detect, investigate, and respond to threats across on-premises, cloud, and hybrid environments. Working within established security architecture, standards, and response procedures, this role supports the design, implementation, and maintenance of enterprise security solutions; develops and tunes detections; maintains security tools; and contributes to automation, incident response, and threat-hunting activities. The position collaborates with internal teams and service providers, escalates highly complex issues, shares knowledge with less-experienced team members, and uses artificial intelligence tools responsibly to improve productivity and efficiency.

Requirements

Minimum of two years of related Information Security experience; three years is strongly preferred.
Hands-on experience in security operations, incident response, and/or detection engineering.
Experience investigating and responding to security incidents.
Experience developing detections, queries, or hunts in a SIEM or similar analytics platform.
Experience administering and maintaining security tools and platforms.
Experience with scripting, security automation, or API-based integrations.
General IT experience in systems administration, network administration, cloud engineering, or a related discipline.
Working knowledge of security operations, incident response, threat detection and hunting, endpoint security, network security, identity and access management, vulnerability management, and cloud platform security.
Hands-on capability with SIEM or comparable analytics platforms, including queries, detections, and investigations.
Experience administering security tools such as SIEM, endpoint detection and response, email security, or vulnerability-management platforms.
Working proficiency in at least one scripting or programming language, such as Python or PowerShell, for automation and integrations.
Ability to develop API-based security automation or orchestration workflows using established patterns.
Understanding of infrastructure, endpoint, network, cloud, and hybrid technologies.
Ability to analyze problems of moderate scope, exercise sound judgment within established procedures, and seek guidance on new or complex assignments.
Ability to translate technical information into business risk and clear, actionable guidance.
Strong written, oral, interpersonal, and customer-service skills.
Ability to prioritize work, manage competing demands, and make sound decisions in high-pressure situations.
High attention to detail, initiative, adaptability, and commitment to continuous learning.
Ability to work effectively in a collaborative, team-oriented environment and build productive internal and external working relationships.
Ability to conduct research, document findings, and communicate recommendations in user-friendly language.
Bachelor's degree in Cyber Security, Information Security, Computer Science, or a related field, or equivalent relevant education and experience may be considered.

Nice To Haves

Three years of related Information Security experience.
CISSP, GCIH, GCFA, GCIA, CySA+, CCSP, a cloud security certification, or another relevant security certification.
Experience with cloud and hybrid environment security.
Experience applying artificial intelligence or large language model tools to investigation, analysis, or automation workflows.
Familiarity with PCI DSS.

Responsibilities

Support the design, implementation, maintenance, and optimization of enterprise security solutions across on-premises, cloud, and hybrid environments, following established security standards and architectural guidance.
Develop, test, and tune threat detections aligned to MITRE ATT&CK using established detection-engineering standards and guidance from senior team members.
Investigate, triage, document, and respond to security events and incidents with internal teams and managed service providers; escalate complex or high-impact matters according to incident-response procedures.
Participate in post-incident reviews and complete assigned remediation, documentation, and process-improvement activities.
Develop and maintain security automation, orchestration, and API-based integrations using established patterns, with guidance on complex implementations.
Use artificial intelligence and large language model tools to support investigations, threat hunting, detection engineering, and automation; validate outputs for accuracy, security, and appropriate use.
Administer, monitor, maintain, and optimize security tools and platforms, including their configuration, upgrades, integrations, health monitoring, runbooks, playbooks, and technical documentation.
Participate in structured threat-hunting activities and apply relevant threat intelligence to identify suspicious activity and strengthen detections.
Identify potential security gaps in cloud and hybrid environments and contribute to recommendations and implementation activities that reduce risk.
Participate in the weekly rotating on-call schedule and provide after-hours and weekend escalation support as assigned.
Share knowledge with less-experienced team members, contribute to peer learning, represent Information Security on assigned projects, and collaborate with third-party vendors and service providers.
Perform other duties as assigned.