Security Operations Engineer II

Duck Creek Technologies • Bay Area, CA

13h

About The Position

The Security Operations Engineer II is a senior team member in Duck Creek Technologies’ Information Security team. The role analyzes, designs, implements, monitors, and evaluates security systems that protect the company’s computer systems and data. It supports information security operations and the implementation and operation of controls and processes for internal and external security requirements, using standard security frameworks and maintaining the information security management system. The engineer monitors cybersecurity intelligence and evolving threat methods to anticipate and address potential breaches, threats, and attacks.

The position provides Tier 2 security operations and SOC support, including incident collection, analysis, response, forensics, post-mortem analysis, and reporting. It contributes to endpoint, network, remote-access, cryptographic, application-security, monitoring, disaster-recovery, and business-continuity initiatives. The role also supports risk assessments, regulatory compliance, security policies, employee training, penetration testing, security metrics, and the integration of threat detection, intelligence, and automation into the security control environment.

Duck Creek describes itself as a flexible-first company. Travel is listed as 0–10%, and candidates must be legally authorized to work in the country of the job location. The role’s expected U.S. salary range depends on candidate location: $130,600–$186,500 in specified high-cost metropolitan areas; $124,600–$178,100 in specified metropolitan areas and states; $118,700–$169,600 in specified states; and $106,800–$161,100 for other U.S. locations. The position is also eligible for annual bonus compensation, subject to plan terms and individual eligibility.

Requirements

• Bachelor’s degree in Information Security, Computer Science, or a related field, or equivalent experience.
• At least 5 years of applicable experience in cybersecurity or related domains.
• CISSP certification or equivalent.
• Proven experience in security operations, incident response, and threat management.
• Demonstrated experience using security frameworks, tools, and technologies to protect organizational assets.
• Strong experience with cryptography, network security, and security monitoring tools such as SIEM and IDS/IPS.
• Ability to analyze and resolve complex security incidents and vulnerabilities.
• Experience in risk assessments and compliance with industry regulations.
• Advanced knowledge of information security principles, threats, and risks.
• Proficiency managing and using information security frameworks and tools.
• In-depth understanding of cryptography, network security, and threat intelligence.
• Experience with security monitoring tools such as SIEM, IDS/IPS, and DLP.
• Ability to analyze complex technical issues and develop solutions.
• Strong time and priority management skills to balance business objectives with security requirements.
• Strong project management skills, including managing multiple large projects within scope, schedule, and budget.
• Ability to work independently with minimal direction and provide strategic input on complex security issues.
• Strong communication skills and ability to present technical issues effectively to varied audiences.
• Expertise in continuous improvement practices and industry-recognized best practices.
• Knowledge of compliance requirements and industry standards, including GDPR and HIPAA.
• Strong analytical skills for assessing and resolving complex security problems.
• Ability to collaborate with cross-functional teams and influence security decisions across the organization.
• Comfort working under pressure and handling multiple priorities.
• Must be legally authorized to work in the country of the job location.

Nice To Haves

• Advanced degree in Information Security, Computer Science, or a related field.
• At least 8 years of experience in cybersecurity or related roles.
• Experience with security automation, advanced threat analysis, and incident response planning.
• Experience in a global software company or similar large-scale enterprise environment.
• Familiarity with regulatory compliance requirements, including GDPR, HIPAA, and others.
• Experience mentoring or providing guidance to junior team members.

Responsibilities

• Support information security operations and implement and operate controls and processes for internal and external security requirements.
• Leverage standard security frameworks and manage ongoing operations of the information security management system.
• Participate in designing and implementing security configurations for servers, appliances, desktops, laptops, and mobile devices.
• Contribute to implementing network firewalls, intrusion detection and prevention, data loss prevention, and network access control solutions.
• Provide Tier 2 support for secure remote access for employees, third parties, and clients.
• Provide Tier 2 support for cryptographic controls protecting data at rest and in motion, including systems, databases, and connections between systems and applications.
• Collaborate with business entities to establish and support Secure Development Lifecycle processes for Duck Creek applications, including managing tools and resources for vulnerability and security code inspections.
• Support disaster recovery planning and implementation for business continuity needs involving internal and external systems and services.
• Monitor systems by acquiring and correlating logs, focusing on security events, and providing alerts for potential incidents.
• Contribute to developing and maintaining information security policies aligned with the business model, industry standards, and regulatory requirements, including managing policy exceptions.
• Act as a subject matter expert during technology risk assessments to ensure alignment with organizational risk tolerance and risk profile.
• Support development and delivery of employee security training on policies, standards, processes, and emerging threats.
• Assist with business continuity and disaster recovery testing across the organization.
• Help ensure regulatory compliance and deliver metrics and reports as required by the CISO and other stakeholders.
• Support penetration testing programs and provide actionable insights to improve the security of systems and services.
• Provide Tier 2 SOC support for collecting, analyzing, and responding to security incidents, including forensics, post-mortem analysis, and reporting.
• Support network security architecture, including firewalls, intrusion detection and prevention, content filtering, and network access control.
• Integrate advanced threat detection, threat intelligence, and security automation into the security control environment, ensuring timely incident classification, escalation, and response.

Benefits

• Flexible work environment.
• Medical, dental, vision, life, and disability insurance.
• 401(k) retirement plan with employer match: 6% employer match up to $12,000 annually.
• Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA).
• Paid holidays, vacation, and volunteer time.
• Employee Assistance Program (EAP).
• Annual bonus compensation, subject to plan terms and individual eligibility.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior