This hands-on role supports security engineering, cloud security, vulnerability management, security automation, incident response, and emerging cybersecurity threats. The Cyber Security Engineer II independently manages moderately complex security initiatives, troubleshoots security technologies, and collaborates with IT, Product Security, Cloud Engineering, Infrastructure, and Development teams to strengthen the organization’s overall security posture.
The role also supports the responsible adoption of artificial intelligence within cybersecurity operations by using approved AI technologies to improve efficiency, enhance threat detection, accelerate investigations, and automate repetitive security activities.
Why This Role Matters
As the organization expands its cloud, SaaS, automation, and AI-enabled capabilities, effective security engineering is essential to protecting business operations and sensitive information. This role helps ensure that security controls remain effective, scalable, and aligned with evolving technologies and threats.
Through technical expertise, cross-functional partnership, and continuous improvement, the Cyber Security Engineer II helps reduce security risk, strengthen system resilience, improve operational efficiency, and balance security requirements with business needs.
Key Responsibilities
Security Engineering and Technology Management
Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments.
Support endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies.
Troubleshoot security-tool configurations, integrations, performance issues, and operational failures.
Evaluate security alerts, tool outputs, and configuration discrepancies to identify opportunities to improve security effectiveness.
Implement security controls and configuration standards aligned with organizational policies and industry best practices.
Assist with testing, integrating, deploying, and documenting new security technologies.
Monitor the effectiveness of implemented controls and recommend improvements that increase coverage and reduce operational complexity.
Support integration of security controls into cloud infrastructure, application platforms, and enterprise technology environments.
Cloud and Infrastructure Security
Implement and maintain security controls across public cloud, government cloud, and segmented cloud environments, as applicable.
Partner with Cloud Engineering and Infrastructure teams to address security misconfigurations, excessive permissions, exposed services, and insecure configurations.
Support cloud security posture management, cloud workload protection, and configuration-compliance initiatives.
Assist with hardening cloud workloads, containers, virtual machines, and supporting infrastructure.
Support secure baseline configurations and security standards, including CIS benchmarks.
Participate in security reviews of infrastructure changes, cloud services, and new technology implementations.
Assist with validating curated container images, approved software libraries, and standardized infrastructure configurations.
Vulnerability and Risk Management
Perform security assessments, configuration reviews, vulnerability analyses, and security testing.
Partner with Vulnerability Management, IT, Cloud Engineering, and Product Security teams to support vulnerability remediation and verification.
Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms.
Validate that security controls and remediation activities adequately address identified risks.
Maintain awareness of emerging vulnerabilities, threat-actor techniques, and security advisories.
Support security-risk assessments and document technical findings, recommendations, and mitigation activities.
Artificial Intelligence Security and Responsible AI Adoption
Use approved AI-enabled security tools and generative AI technologies to accelerate troubleshooting, analysis, configuration reviews, and technical investigations.
Apply AI-assisted analysis to identify patterns, correlate findings, and improve detection of vulnerabilities, misconfigurations, and control weaknesses.
Use approved AI coding assistants to develop and improve security scripts, automation routines, detection logic, and technical documentation.
Identify opportunities to use AI to streamline recurring security-engineering activities and reduce manual processes.
Evaluate AI-generated technical recommendations for accuracy, security implications, and operational suitability before implementation.
Maintain appropriate human validation and oversight of AI-assisted security decisions.
Assist in evaluating risks associated with AI-enabled applications, AI agents, large language models, and third-party AI services.
Support controls addressing prompt injection, sensitive-data exposure, excessive permissions, insecure AI integrations, and unauthorized access.
Support monitoring and investigation of security events involving AI applications, automated agents, and AI-connected services.
Help enforce organizational requirements governing approved AI usage, data handling, access controls, and secure integration.
Security Automation and Process Improvement
Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms.
Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification.
Integrate security platforms to improve visibility, operational consistency, and data accuracy.
Troubleshoot automation failures, integration issues, and inconsistencies between connected technologies.
Identify opportunities to improve workflows, reduce manual effort, and increase operational effectiveness.
Document automation workflows, implementation requirements, and operating procedures.
Security Operations and Incident Response
Provide technical security-engineering assistance during incidents escalated by Security Operations.
Support incident investigations through log analysis, troubleshooting, control validation, and security-tool configuration changes.
Assist with containment measures, detection enhancements, and remediation activities.
Partner with Security Operations to improve alert quality, detection capabilities, and response effectiveness.
Participate in post-incident reviews and implement corrective actions addressing security-control gaps.
Participate in the incident on-call rotation.
Security Assessments, Governance, and Documentation
Conduct periodic security assessments, control reviews, and technical validation activities.
Support security and compliance initiatives involving NIST, CIS, SOC 2, PCI DSS, and FedRAMP, as applicable.
Develop and maintain security-engineering procedures, technical standards, configuration documentation, and operational runbooks.
Gather technical evidence for internal audits, external assessments, and compliance activities.
Document technical risks, security findings, remediation efforts, and control improvements.
Contribute practical engineering input to security policies and technical standards.
Cross-Functional Collaboration
Work closely with Security Operations, Product Security, Cloud Engineering, IT, Infrastructure, and Development teams.
Provide technical guidance regarding security technologies, configurations, and best practices.
Participate in technical discussions, security reviews, and cross-functional initiatives.
Communicate technical security risks and recommendations clearly and effectively.
Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives.
Qualifications
Required
Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience.
Four or more years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline.
Demonstrated experience working with enterprise security technologies and investigating technical security issues.
Experience collaborating with infrastructure, IT, security, or engineering teams.
Preferred
Experience working in a SaaS, cloud-native, or enterprise technology organization.
Experience with public-cloud security technologies, container security, or automated infrastructure security controls.
Experience developing security automation or integrating security technologies through APIs.
Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies.
Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP.
Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials.
Required Skills & Competencies
Intermediate knowledge of cybersecurity concepts, security architecture, defense-in-depth principles, and common security controls.
Hands-on experience implementing, administering, or troubleshooting enterprise security technologies.
Working knowledge of EDR/XDR, SIEM, vulnerability management, identity and access management, or cloud-security platforms.
Understanding of common vulnerabilities, attack techniques, threat actors, and security-assessment methodologies.
Familiarity with incident-response processes, security investigations, and log analysis.
Ability to independently troubleshoot moderately complex security issues with minimal supervision.
Experience evaluating security risks and recommending practical mitigation measures.
Familiarity with cloud infrastructure and security concepts in AWS, Microsoft Azure, or Google Cloud.
Understanding of networking fundamentals, operating-system security, authentication, authorization, and encryption.
Familiarity with cloud-security configurations, workload protection, and identity management.
Basic-to-intermediate scripting experience using Python, PowerShell, Bash, or similar technologies.
Experience working with APIs, system integrations, or security-automation tools.
Ability to interpret technical documentation, security findings, and system-generated reports.
Familiarity with generative AI, large language models, AI-assisted analysis, and their practical use in cybersecurity.
Awareness of AI security risks, including prompt injection, model misuse, data leakage, insecure integrations, and unauthorized access.
Understanding of responsible AI use, including protecting sensitive information and independently validating AI-generated output.
Ability to translate manual security tasks into repeatable, automated workflows.
Effective written and verbal communication skills, including the ability to present technical information to technical and nontechnical stakeholders.
Personal Attributes
Strong analytical thinking and technical problem-solving abilities.
Sound judgment when balancing security requirements with business and operational needs.
Ability to work independently and take ownership of assigned engineering activities.
Strong attention to detail and the ability to manage multiple priorities.
Collaborative approach and willingness to work across organizational functions.
Initiative in identifying security weaknesses and recommending improvements.
Clear, practical, and action-oriented communication style.
Commitment to continuous learning and professional development.
Curiosity about emerging cybersecurity, cloud, automation, and AI technologies.
Adaptability and the ability to operate effectively in a dynamic SaaS technology environment.
Commitment to responsible AI use, human oversight, and protection of sensitive information.
Must be willing to complete all license applications, background checks, security checks and/or any other documentation and provide copies of any identification documents required by any State, Federal or Tribal governmental agency in order to maintain compliance with their laws and to successfully perform in the role.
The information on this description has been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties, responsibilities and qualifications required of employees assigned to this job. Conditions may require the Company to modify this job description and the Company reserves the right to exercise its discretion to make such changes.
Agilysys is an equal opportunity employer. In compliance with Federal and State EEO laws, qualified applicants are considered for all positions without regards to race, color, gender, religion, national origin, ancestry, place of birth, age, marital status, sexual orientation, disability, or veteran status.
Privacy Policy | Agilysys
EEO/AAP Employer
M/F/V/D
Pay Range
$100,000—$120,000 USD
