Cybersecurity Engineer II

The Cybersecurity Engineer II (L2) is a **hands-on technical contributor** responsible for implementing, operating, and improving client’s cybersecurity capabilities across a rapidly growing enterprise. This role focuses on **protecting enterprise systems, data, and users**, while helping scale security controls across newly acquired agencies and modern cloud-based platforms. You will work closely with infrastructure, cloud, and application teams to ensure security is embedded into everything we build and operate. * * * **Required Qualifications** - 3–5+ years of experience in cybersecurity, IT security, or related engineering roles - Strong hands-on experience with: - Microsoft 365 / Entra ID / Active Directory - Endpoint management and security tools - Vulnerability management practices - Experience working in **complex or distributed enterprise environments** - Strong troubleshooting, problem-solving, and analytical skills - Ability to balance **security rigor with business agility** * * * **Key Responsibilities** **Security Engineering & Operations** - Implement and manage security controls across: - Identity & access management (IAM / Entra ID / Active Directory) - Endpoint security and device management (e.g., Intune) - Cloud security for SaaS and emerging platforms - Support day-to-day security operations, including alert triage, investigation, and response - Assist in improving detection and response capabilities (EDR/XDR, SIEM use cases) **Vulnerability & Risk Management** - Identify, assess, and remediate vulnerabilities across infrastructure and applications - Support vulnerability management programs aligned with enterprise risk priorities - Partner with engineering teams to drive remediation tracking and accountability **M&A Integration Security** - Help onboard newly acquired agencies into client’s security standards - Participate in: - Identity consolidation and cleanup - Endpoint onboarding and hardening - Security baseline enforcement - Ensure consistent security posture across a highly distributed organization **Security Enablement (Not “Security Says No”)** - Collaborate with business and technical teams to deliver **secure-by-design solutions** - Provide actionable, pragmatic guidance that enables the business while reducing risk - Contribute to a culture of security as a **business enabler**, not a blocker **Compliance & Governance Support** - Assist with implementation of controls aligned to regulatory and industry frameworks - Support audit readiness and evidence collection activities - Help align security practices with evolving cyber risk and regulatory requirements relevant to insurance and data protection **Automation & Continuous Improvement** - Improve operational efficiency through automation and tooling - Contribute to standardization of security processes across the enterprise - Support adoption of scalable, repeatable security patterns