Req ID: 496092
Benefits: * Fuel Your Growth with Love's - company funded tuition assistance * Paid Time Off * 401(k) - 100% Match up to 5% * Medical/Dental/Vision Insurance after 30 days * Competitive Pay Career Development
Welcome to Love's: The Cyber Security Engineer II - Security Operations performs hands-on security engineering and operational work of moderate scope to help detect, investigate, and respond to threats across the company's on-premises, cloud, and hybrid environments. Working within established security architecture, standards, and response procedures, this role supports the design, implementation, and maintenance of enterprise security solutions; develops and tunes detections; maintains security tools; and contributes to automation, incident response, and threat-hunting activities. The position collaborates with internal teams and service providers, escalates highly complex issues, shares knowledge with less-experienced team members, and uses artificial intelligence tools responsibly to improve productivity and efficiency.
MAJOR RESPONSIBILITIES: - Support the design, implementation, maintenance, and optimization of enterprise security solutions that detect, prevent, and respond to threats across on-premises, cloud, and hybrid environments, following established security standards and architectural guidance.
- Develop, test, and tune threat detections aligned to MITRE ATT&CK using established detection-engineering standards and guidance from senior team members to improve alert quality and response effectiveness.
- Investigate, triage, document, and respond to security events and incidents in partnership with internal teams and managed service providers; escalate complex or high-impact matters in accordance with incident-response procedures.
- Participate in post-incident reviews and complete assigned remediation, documentation, and process-improvement activities.
- Develop and maintain security automation, orchestration, and API-based integrations using established patterns, with guidance on complex implementations.
- Use artificial intelligence and large language model tools to support investigations, threat hunting, detection engineering, and automation; validate outputs for accuracy, security, and appropriate use.
- Administer, monitor, maintain, and optimize security tools and platforms, including configuration, upgrades, integrations, health monitoring, runbooks, playbooks, and technical documentation.
- Participate in structured threat-hunting activities and apply relevant threat intelligence to identify suspicious activity and strengthen detections.
- Identify potential security gaps in cloud and hybrid environments and contribute to recommendations and implementation activities that reduce risk.
- Participate in the weekly rotating on-call schedule and provide after-hours and weekend escalation support as assigned.
- Share knowledge with less-experienced team members, contribute to peer learning, represent Information Security on assigned projects, and collaborate with third-party vendors and service providers.
- Perform other duties as assigned.
EDUCATION AND EXPERIENCE: Education:
- Bachelor's degree in Cyber Security, Information Security, Computer Science, or a related field preferred; equivalent relevant education and experience may be considered.
- CISSP, GCIH, GCFA, GCIA, CySA+, CCSP, a cloud security certification, or another relevant security certification strongly preferred.
Experience:
- Minimum of two years of related Information Security experience required; three years strongly preferred.
- Hands-on experience in security operations, incident response, and/or detection engineering required.
- Experience investigating and responding to security incidents required.
- Experience developing detections, queries, or hunts in a SIEM or similar analytics platform required.
- Experience administering and maintaining security tools and platforms required.
- Experience with scripting, security automation, or API-based integrations required.
- General IT experience in systems administration, network administration, cloud engineering, or a related discipline required.
- Experience with cloud and hybrid environment security preferred.
- Experience applying artificial intelligence or large language model tools to investigation, analysis, or automation workflows preferred.
SKILLS AND PHYSICAL DEMANDS: Skills:
- Working knowledge of security operations, incident response, threat detection and hunting, endpoint security, network security, identity and access management, vulnerability management, and cloud platform security.
- Hands-on capability with SIEM or comparable analytics platforms, including queries, detections, and investigations.
- Experience administering security tools such as SIEM, endpoint detection and response, email security, or vulnerability-management platforms.
- Working proficiency in at least one scripting or programming language, such as Python or PowerShell, for automation and integrations.
- Ability to develop API-based security automation or orchestration workflows using established patterns.
- Familiarity with the NIST Cybersecurity Framework and MITRE ATT&CK; familiarity with PCI DSS is preferred.
- Understanding of infrastructure, endpoint, network, cloud, and hybrid technologies.
- AI awareness and the ability to use approved AI tools to drive productivity and efficiency while validating outputs.
- Ability to analyze problems of moderate scope, exercise sound judgment within established procedures, and seek guidance on new or complex assignments.
- Ability to translate technical information into business risk and clear, actionable guidance.
- Strong written, oral, interpersonal, and customer-service skills.
- Ability to prioritize work, manage competing demands, and make sound decisions in high-pressure situations.
- High attention to detail, initiative, adaptability, and commitment to continuous learning.
- Ability to work effectively in a collaborative, team-oriented environment and build productive internal and external working relationships.
- Ability to conduct research, document findings, and communicate recommendations in user-friendly language.
Typical Physical Demands:
- Requires prolonged sitting, some bending and stooping.
- Eye strain associated with screen use.
- Manual dexterity sufficient to operate a computer keyboard and calculator.
- Occasional lifting up to 25 pounds.
- Requires normal range of hearing and vision.
- Additional hours may be necessary.
- Participates in a weekly rotating on-call schedule and must be available for assigned after-hours and weekend escalations.
