Security Engineer II

Barracuda Networks Inc.•Chelmsford, MA

2d•$102,000 - $135,000•Hybrid

About The Position

We are seeking a hands-on Security Engineer II to configure and deploy security technologies into Barracuda's environment and to continuously improve the strength, coverage, timeliness, and auditability of our security controls. In this role, you will operationalize the tooling that protects our cloud platforms, identities, and endpoints—turning security requirements into well-instrumented, automated, and measurable controls. You will work across cloud security posture, identity and access management, and security automation to close gaps, reduce risk, and make our control coverage provable. This is a great opportunity for an early-career engineer who is energized by building and automating security controls, thrives in a fast-moving environment, and wants to see the technologies they deploy make a measurable impact on organizational resilience and trust. You will partner cross-functionally with teams across Security, IT, Engineering, and Operations to deliver reliable, auditable protection at scale.

Requirements

Bachelor's degree in Computer Science or a related field and 2 years of relevant security experience, or equivalent combination of education and experience.
Hands-on experience configuring and deploying security technologies across cloud environments such as Microsoft Azure or AWS.
Working knowledge of identity and access management concepts and tooling, such as cloud identity platforms (e.g., Microsoft Entra ID), Conditional Access, PIM, MFA, and PAM solutions (e.g., CyberArk).
Experience with cloud and SaaS security posture tooling—for example, platforms such as Wiz, CrowdStrike, or AlgoSec—across CSPM, SSPM, and NSPM.
Proficiency in scripting and automation with languages and tools such as Python, PowerShell, and SQL, using source control (e.g., Git) and job scheduling to build repeatable, auditable processes.
Ability to build security reporting and metrics using BI tools such as Power BI to improve the timeliness and visibility of control status.
Familiarity with endpoint management and compliance tooling (e.g., Microsoft Intune) and with log and event data for security monitoring.
Strong documentation and communication skills, with a collaborative approach to working across engineering, IT, and security teams.

Nice To Haves

Exposure to security compliance frameworks (e.g., SOC 2, ISO 27001, NIST CSF) and relevant certifications are a plus.

Responsibilities

Configure, deploy, and tune security technologies across Barracuda's cloud and enterprise environment, continuously improving the strength, coverage, timeliness, and auditability of our security controls.
Build and operate cloud, SaaS, and network security posture management (CSPM, SSPM, and NSPM) capabilities using platforms such as Wiz, CrowdStrike, or AlgoSec.
Onboard SaaS platforms into a security posture management solution through API integrations and service-account configurations, coordinating implementation with application owners to expand control coverage.
Engineer and harden identity and access management controls in a cloud identity platform such as Microsoft Entra ID, including capabilities like Conditional Access, Privileged Identity Management (PIM), MFA, and provisioning of cloud administrator accounts.
Administer privileged access management (PAM) using a solution such as CyberArk, including account onboarding, safe creation and assignment, access monitoring, and security-tool integrations.
Automate recurring security reviews and configuration drift detection (for example, Conditional Access and Named Location changes) using scripting and job-scheduling tools such as Python, PowerShell, SQL, and Git-based comparisons.
Develop automated security reporting and dashboards—using tools such as Python, SQL, and Power BI—to make control status, coverage, and timeliness visible to stakeholders and auditors.
Manage endpoint security and device compliance through mobile device management tooling such as Microsoft Intune, delivering scheduled and on-demand policy updates.
Support the break-glass and emergency-access program, ensuring critical controls are resilient, monitored, and audit-ready.