Security Engineer 2

Ben E. Keith Company•Fort Worth, TX

About The Position

The Security Engineer 2 (SE2) is an experienced, hands-on security practitioner responsible for Level 2 (L2) security operations, incident response, and platform ownership across the Microsoft security stack and supporting security technologies. This role operates beyond initial alert triage by leading investigations, coordinating incident response, managing key security platforms, and driving remediation activities across endpoint and identity environments. The SE2 works closely with the Security Manager and CISO to mature the organization’s security operations while mentoring Level 1 Security Engineers. The role also supports cyber-physical security convergence, assisting with security oversight of IP-based physical security systems in coordination with the Physical Security team.

Requirements

Bachelor’s Degree in Information Security, Computer Science, or related field (or equivalent experience)
3-6 years of progressive cybersecurity or security operations experience
Hands-on experience with incident response and security investigations
Strong analytical and investigative skills
Ability to mentor junior engineers
Strong understanding of modern security principles including identity-centric security, endpoint protection, segmentation, and cloud security.
Strong written and verbal communication skills
Comfortable working in a fast-paced, operational security environment
Akamai WAF Ownership

Nice To Haves

Basic understanding of Artificial Intelligence (AI) and Large Language Models (LLMs)
Familiarity with AI security concepts, including data exposure and prompt-based risks, model misuse and abuse scenarios, AI-assisted social engineering / phishing patterns, and secure usage guardrails and user enablement considerations
Microsoft Security certifications
CISSP, GIAC, or other mid-level security certifications

Responsibilities

Lead investigation, containment, and remediation of security incidents escalated from Level 1
Perform advanced analysis across endpoint, identity, and cloud security telemetry
Support incident documentation and reporting as required
Coordinate response actions with Infrastructure, IAM, and other IT teams
Operate, Tune, and Improve rules signal quality for Microsoft Security Platform, Web Application Firewall (WAF), Data Loss Prevention, Asset Management, and Identity and Access Management
Drive security remediation activities across endpoints and platforms
Perform incident response across endpoint and platform security events
Partner with IT teams to enforce security controls and hardening standards
Provide technical security oversight for IP-based physical security tooling, including network-connected cameras, access control systems, and the Genetec platform
Assist in coordination with the Physical Security team to ensure secure network configuration for physical security systems, appropriate identity and access protections, and alignment between cyber security controls and physical security operations
Mentor and guide Security Engineer 1 (L1) professionals
Contribute to security runbooks, procedures, and standards
Provide recommendations for security tooling and operational improvements
Support metrics collection and operational reporting efforts