Security Engineer II (Defensive Operations)

Qualifications

• Education: Bachelor’s degree in Computer Science, Cyber Security, Software Engineering, or a related technical discipline (or equivalent experience).
• Experience: 3+ years of progressive engineering experience moving fluidly between Application Security, Cloud Architecture Defense, and Active Security Operations (SecOps/Incident Response/Penetration Testing).
• Advanced Exploitation & Defense: Proven track record of independently performing deep manual penetration testing, web application exploitation, and incident containment without relying solely on commercial automated scanners.
• Cloud & DevOps Stack: Strong practical knowledge of AWS or public cloud topologies, containerization (Docker, Kubernetes), network security, and building/maintaining GitLab CI pipelines.
• Programming Languages: Foundational proficiency with modern web development frameworks and programming languages including Python, Ruby on Rails, Java, or Node.js.
• AI & Security Domains: Solid understanding of the OWASP Top 10 for LLMs framework, applied cryptography, cloud network isolation, and federated authentication architectures (OAuth2, SAML, OIDC, Zero Trust IAM).
• SecOps & Forensics: Working proficiency with modern EDR platforms, SIEM systems, network packet analysis (PCAP), threat intelligence frameworks (MITRE ATT&CK), and forensic collection tools.
• Compliance: Practical experience aligning technical software and infrastructure controls with standards like PCI-DSS (v4.0), SOC 1, SOC 2, or DORA.
• Offensive/Red Team: OSCP, OSCE, or SANS GXPN.
• Cloud & Architecture: AWS Certified Security - Specialty, CKS (Certified Kubernetes Security Specialist), or CISSP.
• Incident Response: GCIH, GCFA, or specialized Blue Team certifications.
• AI Security: OffSec OSAI.