Analyst II, Security Engineer

Role Overview As an Analyst II, Security Engineer, you’ll play a key role in keeping Diligent’s corporate systems, infrastructure, and cloud environments secure. You’ll work hands-on with modern security tools, partner with experienced engineers, and help shape how security is built, automated, and scaled across the company. You’ll spend your time improving security platforms (EDR, vulnerability management, MDR, CSPM, SIEM), building automation and AI-enabled workflows, and ensuring high-quality security data to drive detection and response. This is a great opportunity if you enjoy solving complex security engineering problems, like working across teams, and want to deepen your expertise in cloud security, security automation, and modern security architectures. Here’s a breakdown of what you’ll do (not all of it, just the important stuff) Administer and improve core security platforms (EDR, vulnerability management, MDR, CSPM) to protect endpoints, cloud workloads, and networks. Manage SIEM log ingestion and data quality by onboarding new log sources, monitoring pipelines, and ensuring reliable, complete security telemetry. Contribute to security architecture reviews and translate standards and patterns into practical implementation guidance for engineering and infrastructure teams. Design and build automation and AI-assisted workflows (e.g., SOAR playbooks, scripted tooling) to streamline alert triage, enrichment, and incident response. Evaluate emerging security technologies, run proofs of concept, and provide input into tool selection and long-term security architecture decisions. Support integration of security controls into change management and enterprise workflows, partnering with cross-functional stakeholders to embed security by design. These are the essentials you’ll need to get an interview 3–5 years of experience in information security engineering or security architecture, with hands-on administration of enterprise security tools. Strong experience with key security platforms such as EDR, vulnerability management, MDR services, CSPM, and common network security controls. Practical experience with SIEM tools, including integrating log sources, monitoring log health, and supporting detection or content engineering. Working knowledge of AWS, Azure, or GCP security concepts, architectures, and guardrails in multi-cloud environments. Experience building security automation using SOAR platforms and/or scripting (for example Python or PowerShell), or working with AI-assisted security capabilities. Familiarity with security and compliance frameworks such as ISO 27001, NIST CSF, or SOC 2 and how they translate into technical controls. Clear written and verbal communication skills, with the ability to collaborate effectively with technical and non-technical stakeholders. It would be great if you had these too, but we’ll support you if you don’t Experience working with formal change management frameworks (such as ITIL) and integrating security controls into change workflows. Familiarity with collaboration and security tooling like Jira, Confluence, and Microsoft 365 E5. A track record of analyzing complex security trade-offs and helping teams choose pragmatic, secure solutions. About Us Diligent is the AI leader in governance, risk and compliance (GRC) SaaS solutions, helping more than 1 million users and 700,000 board members to clarify risk and elevate governance. The Diligent One Platform gives practitioners, the C-Suite and the board a consolidated view of their entire GRC practice so they can more effectively manage risk, build greater resilience and make better decisions, faster. At Diligent, we're building the future with people who think boldly and move fast. Whether you're designing systems that leverage large language models or part of a team reimaging workflows with AI, you'll help us unlock entirely new ways of working and thinking. Curiosity is in our DNA, we look for individuals willing to ask the big question…