Security Engineer II

Advantage Solutions is one of North America’s leading sales and marketing agencies specializing in outsourced sales and marketing services. The Security Engineer II will focus on designing, implementing, and maintaining security measures to protect information systems, while also assessing vulnerabilities and developing security protocols.

Responsibilities:

• Supports assigned activities for small projects that potentially have an exceptional impact on the long-term growth of the company throughout the entire lifecycle
• Learns, documents, and tests technical security standards and best practices to ensure compliance with security policies, guidelines, standards, controls, and governance
• Reviews and assists with testing and documenting security designs
• Support the Cyber Defense team by assisting in gathering evidence and tracking tasks
• Understands key features for at least one product in the security portfolio
• Develop an understanding of the latest security technologies, trends, and threats

Requirements:

• Bachelor's degree
• 2–4 years experience in relevant field
• Broad, practical knowledge of securing cloud platforms such as public cloud providers
• Advanced knowledge of cloud-native security services
• Broad, practical knowledge of compliance standards such as ISO 27001, NIST, CIS, GDPR, and SOC2, and experience implementing governance policies
• Broad, practical knowledge of security architecture principles and best practices, particularly in network defense, endpoint security, and cloud security
• Broad, practical knowledge of cloud security services and tools like IAM, encryption, network security, firewalls, and logging/monitoring solutions
• Familiar with common cloud security tools, able to automate straightforward tasks, and begins to identify areas for improvement in security processes by incorporating simple automation
• Broad, practical knowledge of firewalls, intrusion detection/prevention systems (IDS/IPS), and endpoint protection solutions
• Familiar with key regulatory frameworks, able to independently align security activities with compliance requirements, and supports audits with minimal guidance
• Broad, practical knowledge of cloud network security and encryption methodologies
• Able to provide assistance to cross-functional teams in risk management, incident response, and compliance activities
• Strong communication skills, with the ability to communicate information that may involve explanation or interpretation within the department
• Ability to think critically and make risk-based decisions in high-pressure environments
• Working knowledge of conducting vendor security assessments and able to identify standard security risks in vendor contracts
• Able to analyze and assess straightforward risks and recognize common incident patterns
• Capable of identifying common new threats, applying updated practices with some guidance, and adjusting response strategies in familiar scenarios with limited supervision
• Broad, practical understanding of Privilege Management, Application Control, Antivirus, Endpoint Detection and Response, File Integrity Monitoring, Intrusion Detection/Prevention Systems, logging/monitoring, and other commonly implemented enterprise security technologies
• Broad, practical knowledge of network protocols such as TCP/IP, DNS, HTTP/HTTPS, BGP, OSPF, and SNMP
• Degree in Cybersecurity, Computer Science or related field preferred
• Security Engineering or Cyber Defense experience preferred