Security Engineer II

Healthcare Outcomes Performance Co. (HOPCo) • Phoenix, AZ

4d • Onsite

About The Position

The Security Engineer II role focuses on enhancing Security Operations Center (SOC) capabilities, implementing security frameworks, managing endpoint security, supporting incident response, performing threat analysis, integrating threat intelligence, ensuring risk management and compliance, developing security engineering practices, implementing automation, and collaborating with stakeholders to continuously improve the enterprise security posture. This role requires a deep understanding of SOC workflows, SIEM solutions, firewall technologies, cloud security principles, and various regulatory frameworks. The engineer will be responsible for designing and implementing secure architectures, automating security processes, and communicating complex technical concepts effectively.

Requirements

• Associate’s degree in Cybersecurity, Information Technology, and related field hands on experience (required)
• Certified Information Security Manager (CISM) required
• At least 3-6 years of experience in engineering enterprise IT platforms.
• At least 2-5 years of experience managing and implementing enterprise security solutions.
• Minimum of 3 years in SOC engineering, incident response, or security automation.
• Proven experience designing and securing network platforms, including VPNs, proxies, and IDS/IPS solutions.
• At least 2-4 years of experience working with SIEM platforms, threat hunting, and endpoint detection response (EDR) solutions.
• A minimum of 3 years of experience in security design and implementation.
• Proven expertise in designing and deploying Azure cloud solutions including security
• In-depth understanding of SOC workflows, log management, and SIEM solutions (Splunk, Sentinel, QRadar, etc.).
• Expertise in firewalls, including Palo Alto, Fortinet, Cisco, or Check Point.
• In-depth understanding of cloud computing principles, serverless architectures, and cloud-native development.
• Familiarity with cloud security models in AWS, Azure, and Google Cloud.
• Knowledge of cybersecurity principles, authentication protocols (OAuth, SAML).
• Strong knowledge of compliance standards and best practices such as NIST, ISO 27001, SOC-2, PCI-DSS, HIPAA, and GDPR.
• Experience with Python, PowerShell, or Bash for security automation.
• Ability to design and implement secure architectures.
• Strong analytical skills for investigating security incidents.
• Proficiency in automating security processes and threat detection workflows.
• Ability to manage security projects and drive cross-functional initiatives.
• Strong ability to present security concepts to technical and non-technical stakeholders.
• Align security initiatives with business and IT strategies.
• Identify and prioritize security risks with data-driven analysis.
• Guide teams in implementing best practices for security operations.
• Stay ahead of emerging cybersecurity threats and technologies.
• Proficiency in PowerShell, Terraform, and ARM templates.
• Maintain strong attention to detail and organizational skills.
• Strong ability to mentor and guide technical teams, fostering technical growth and collaboration.
• Ability to translate complex technical concepts into clear insights for both technical and non-technical audiences.
• Skill in managing multiple projects, prioritizing tasks, working independently, and delivering high-quality solutions within deadlines.

Nice To Haves

• Preferred Certifications - CISSP, GIAC (GSEC, GCIA, GCIH), CCNP Security, Palo Alto Networks PCNSA/PCNSE, or equivalent.
• Passion for staying up to date with industry trends, emerging technologies, and best practices.

Responsibilities

• Engineer and enhance Security Operations Center (SOC) capabilities, integrating security monitoring tools, SIEM solutions, and automation workflows in 24x7 mission critical environments.
• Implement security frameworks and processes that enhance the efficiency of security operations teams in multi-tenant and geographically diverse client environments.
• Deploy, enhance, and maintain enterprise security solutions to align with best practices to minimize attack surfaces, threats, and security risks within the supported environments.
• Work closely with SOC analysts and Security Engineers to refine incident detection, investigation, and response capabilities including participation in 24x7 on-call escalation rotations while developing and/or modifying incident response procedures. Exercises independent judgment in analyzing and responding to security incidents.
• Performs advanced analysis of security threats and system vulnerabilities.
• Integrate threat intelligence feeds and analytics to improve proactive threat detection and mitigation.
• Ensure security controls comply with industry regulations such as NIST, ISO 27001, and SOC 2.
• Define and document security reference engineering and best practices for network and cloud environments.
• Implement automation strategies for security processes, including security policy management and security alert triaging.
• Work with IT, DevOps, and business units to align security policies with operational goals.
• Monitor emerging threats, security trends, and best practices to enhance enterprise security posture.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree