Cybersecurity Engineer II

The Cybersecurity Engineer II (L2) is a hands-on technical contributor responsible for implementing, operating, and improving client’s cybersecurity capabilities across a rapidly growing enterprise.

This role focuses on protecting enterprise systems, data, and users, while helping scale security controls across newly acquired agencies and modern cloud-based platforms. You will work closely with infrastructure, cloud, and application teams to ensure security is embedded into everything we build and operate.

Required Qualifications

• 3–5+ years of experience in cybersecurity, IT security, or related engineering roles

• Strong hands-on experience with:

  • Microsoft 365 / Entra ID / Active Directory

  • Endpoint management and security tools

  • Vulnerability management practices

• Experience working in complex or distributed enterprise environments

• Strong troubleshooting, problem-solving, and analytical skills

• Ability to balance security rigor with business agility

Key Responsibilities

Security Engineering & Operations

• Implement and manage security controls across:

  • Identity & access management (IAM / Entra ID / Active Directory)

  • Endpoint security and device management (e.g., Intune)

  • Cloud security for SaaS and emerging platforms

• Support day-to-day security operations, including alert triage, investigation, and response

• Assist in improving detection and response capabilities (EDR/XDR, SIEM use cases)

Vulnerability & Risk Management

• Identify, assess, and remediate vulnerabilities across infrastructure and applications

• Support vulnerability management programs aligned with enterprise risk priorities

• Partner with engineering teams to drive remediation tracking and accountability

M&A Integration Security

• Help onboard newly acquired agencies into client’s security standards

• Participate in:

  • Identity consolidation and cleanup

  • Endpoint onboarding and hardening

  • Security baseline enforcement

• Ensure consistent security posture across a highly distributed organization

Security Enablement (Not “Security Says No”)

• Collaborate with business and technical teams to deliver secure-by-design solutions

• Provide actionable, pragmatic guidance that enables the business while reducing risk

• Contribute to a culture of security as a business enabler, not a blocker

Compliance & Governance Support

• Assist with implementation of controls aligned to regulatory and industry frameworks

• Support audit readiness and evidence collection activities

• Help align security practices with evolving cyber risk and regulatory requirements relevant to insurance and data protection

Automation & Continuous Improvement

• Improve operational efficiency through automation and tooling

• Contribute to standardization of security processes across the enterprise

• Support adoption of scalable, repeatable security patterns

Originally posted on Himalayas