Security Engineer II

Responsibilities

• Design and implement security controls and architectures tailored to client needs
• Lead the integration of cybersecurity best practices into development and deployment processes
• Maintain security tools, processes, and policies to ensure compliance with NIST, CIS, ISO 27001, HIPAA, and PCI DSS
• Lead vulnerability assessments and penetration testing to identify and mitigate risks
• Manage incident response processes and coordinate with stakeholders during incidents
• Develop security policies and conduct training programs for staff and clients
• Monitor network traffic and security alerts using SIEM and other monitoring tools
• Assist in patch management and investigate security events to identify breaches
• Create regular security status reports for senior management and clients
• Support internal and external audits and ensure regulatory compliance
• Implement automation and advanced security tools like MFA and encryption

Requirements

• Strong analytical and problem-solving abilities
• Excellent written and verbal communication skills
• Experience with security frameworks such as NIST, CIS, or ISO 27001
• Familiarity with cloud security platforms like AWS or Azure
• Understanding of common attack vectors and mitigation techniques
• Knowledge of compliance standards like HIPAA and PCI DSS
• Experience automating security tasks in a multi-client environment

Preferred Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field
• Relevant certifications such as CompTIA Security+, CEH, CASP, SSCP, CISSP, or CISM
• 4 to 6 years of experience in cybersecurity, including 2 years as a security engineer
• Knowledge of network protocols (TCP/IP, HTTP, DNS)
• Familiarity with firewalls, IDS, and vulnerability management tools
• Knowledge of Windows, Linux, and MacOS operating systems
• Experience working in an MSP environment
• Familiarity with Arizona's data breach notification laws

About the Company

One Step Secure I/T is an MSP providing the latest in managed services and cybersecurity. We are a stable, privately-owned company with a strong culture and a team that values trust, integrity, and long-term loyalty.