Security Engineer II

Job Summary The Security Engineer II is responsible for the implementation, administration, maintenance, and continuous improvement of the security technologies and controls. The role will ensure that security systems are effectively configured, monitored, and aligned with internal security standards, policies, and industry best practices. The role requires strong technical knowledge across enterprise security, including identity and access management, endpoint security, vulnerability management, security monitoring, network security, and security infrastructure. The Security Engineer II will work across the environment, from perimeter and network security through to endpoints, servers, identity services, and backend systems. The Security Engineer II will work closely with the CISO, Security Team, Operations, Infrastructure, and other stakeholders to investigate security events, remediate vulnerabilities, implement security improvements, and support security initiatives arising from business, compliance, and technological requirements. Scope The Security Engineer II will operate across the security infrastructure and will be responsible for maintaining and improving the technical security controls used to protect the organisation, its infrastructure, and customer environments. The role will have responsibility for security technology administration, security monitoring and investigation, vulnerability management, identity and access security, endpoint security, security configuration and hardening, and the implementation of security improvements. The role will also provide technical support for ISO 27001 and SOC 2 security controls, contribute to security projects and initiatives, and work with internal teams to identify and remediate security risks. The Security Engineer II will be expected to operate independently on technical security matters, investigate problems to root cause, and provide practical solutions that improve the overall security posture of the organisation. Responsibilities and Duties 1.Security Technology a. Administer, maintain and optimise the security platforms and technologies. b. Configure security systems in accordance with approved security policies, standards and best practices. c. Monitor the health and effectiveness of security controls. d. Troubleshoot complex security technology and infrastructure issues. e. Assist with the evaluation, testing and implementation of new security technologies. f. Maintain accurate technical documentation and configuration records. 2. Security Monitoring & Incident Response a. Monitor and investigate security alerts from EDR, SIEM and other security platforms. b. Investigate suspicious activity across endpoints, servers, identity systems and networks. c. Support security incident response, including investigation, containment, remediation and recovery. d. Identify trends and recurring security events and recommend improvements to reduce false positives and security risk. e. Escalate significant security incidents appropriately and participate in post-incident reviews. 3. Vulnerability Management a. Administer and maintain vulnerability assessment and scanning platforms. b. Analyse vulnerability findings and assess risk based on severity, exploitability, asset criticality and business impact. c. Coordinate vulnerability remediation with Operations and Infrastructure teams. d. Track remediation activities and identify recurring or systemic vulnerabilities. e. Provide technical guidance on vulnerability remediation where required. 4. Identity & Access Security a. Administer and maintain Active Directory and associated identity services. b. Support secure authentication, authorisation and privileged access controls. c. Assist with the management and review of privileged accounts and access rights. d. Implement and maintain security-related Group Policy controls. e. Support MFA and identity security technologies. f. Investigate suspicious authentication and account activity. g. Assist with maintaining the security of certificate services and identity infrastructure. 5. Endpoint & Network Security a. Administer and maintain endpoint security and EDR technologies. b. Support endpoint hardening and security configuration standards. c. Assist with the administration and security of network security technologies. d. Support ZTNA, DLP, firewall and related security controls. e. Assess the security impact of infrastructure and technology changes. 6. Security Compliance & Risk a. Support technical controls required for ISO 27001 and SOC 2. b. Provide technical evidence and support for internal and external audits. c. Assist with security risk assessments and remediation activities. d. Maintain documentation relating to security controls and technologies. e. Support customer security assessments and technical security questionnaires where required. 7. Automation & Continuous Improvement a. Identify opportunities to automate repetitive security tasks and processes. b. Develop or contribute to scripts and automation, particularly using PowerShell and/or other appropriate technologies. c. Identify weaknesses or inefficiencies in existing security processes and recommend improvements. d. Develop security reporting and metrics where required. e. Continuously evaluate the effectiveness of existing security controls. 8. Technical Projects a. Participate in security-related infrastructure and technology projects. b. Contribute to security architecture and technical design discussions. c. Assist with implementation and migration of security technologies. d. Work with vendors and internal technical teams to resolve complex security issues. e. Provide technical guidance to junior members of the Security Team where appropriate. Requirements for the Role 1. Technical a. Strong understanding of enterprise cybersecurity principles and security best practices. b. Strong troubleshooting and analytical skills. c. Ability to investigate technical problems independently and identify root cause. d. Good understanding of Active Directory, Windows security and identity management. e. Good understanding of networking fundamentals including TCP/IP, DNS, DHCP, routing and common network security concepts. f. Practical understanding of endpoint security and EDR technologies. g. Practical understanding of vulnerability management and remediation. h. Understanding of SIEM, security monitoring and incident response principles. i. Understanding of network security technologies including firewalls, VPN/ZTNA and DLP. j. Ability to interpret technical logs and security events. k. Experience with PowerShell, Python or another scripting/automation language would be advantageous. 2. Professional / Behavioural a. Demonstrates strong analytical thinking and problem-solving ability. b. Able to work independently and take ownership of technical issues through to resolution. c. Comfortable working on unfamiliar problems and researching solutions. d. Demonstrates curiosity and a willingness to continuously learn. e. Able to distinguish between symptoms and underlying root causes. f. Comfortable challenging existing processes and proposing improvements. g. Able to communicate technical issues clearly to both technical and non-technical stakeholders. h. Able to work collaboratively across Security, Operations and other business functions. i. Able to prioritise activities based on security risk and business impact. j. Demonstrates sound judgement when dealing with security-sensitive systems and information. Qualifications / Experience 1. Essential a. 3–5 years' experience in an IT infrastructure, security engineering, security operations or related technical role. b. Demonstrable experience administering and troubleshooting enterprise IT environments. c. Practical experience with cybersecurity technologies and security controls. d. Practical experience with Microsoft Active Directory and Windows environments. e. Experience with vulnerability management and security remediation. f. Experience investigating security alerts, incidents or suspicious activity. g. Experience working with security policies, standards or frameworks. 2. Advantageous a. Experience with EDR platforms such as Sentinel One, CrowdStrike, Defender for Endpoint or equivalent. b. Experience with SIEM platforms. c. Experience with vulnerability management platforms such as Nessus/Tenable. d. Experience with ZTNA, DLP or secure access technologies. e. Experience with MFA/identity security platforms. f. Experience with PowerShell or Python automation. g. Experience with ISO 27001 and/or SOC 2. h. Experience in an MSP, IaaS, hosting or multi-tenant environment. i. Relevant industry certifications such as Security+, CySA+, SSCP, CISSP or equivalent experience.