Cyber Security Engineer II

Agilysys helps protect complex digital environments by implementing and operating security technologies across cloud, SaaS, endpoints, and enterprise platforms. In this role, you will maintain and improve security controls and automation to support resilient infrastructure, stronger detection, and faster investigations.

What you’ll be doing

• Implement, configure, maintain, and optimize enterprise security technologies across cloud, SaaS, and corporate environments.
• Support endpoint protection including EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, and data protection technologies.
• Troubleshoot security-tool configurations, integrations, performance issues, and operational failures.
• Evaluate security alerts and tool outputs to identify configuration discrepancies and opportunities to improve security effectiveness.
• Implement security controls aligned with organizational policies and industry best practices, including configuration standards such as CIS benchmarks.
• Support testing, integration, deployment, and documentation of new security technologies.
• Monitor control effectiveness and recommend improvements that increase coverage while reducing operational complexity.
• Assist with cloud hardening for workloads, containers, virtual machines, and supporting infrastructure, including secure baseline configurations.
• Contribute to cloud security posture management and cloud workload protection, including configuration-compliance initiatives.
• Partner with Cloud Engineering and Infrastructure teams to address security misconfigurations, excessive permissions, exposed services, and insecure configurations.
• Perform security assessments, configuration reviews, vulnerability analyses, and security testing.
• Support vulnerability remediation and verification with Vulnerability Management, IT, Cloud Engineering, and Product Security teams.
• Investigate discrepancies among security-assessment tools, infrastructure inventories, and patch-management platforms.
• Maintain awareness of emerging vulnerabilities, threat-actor techniques, and security advisories, and document technical findings, recommendations, and mitigation activities.
• Use approved AI-enabled security tools and generative AI technologies to accelerate troubleshooting, analysis, configuration reviews, and technical investigations, with human validation and oversight.
• Assess risks related to AI-enabled applications, AI agents, large language models, and third-party AI services, including prompt injection and sensitive-data exposure.
• Develop and maintain scripts and automated workflows using Python, PowerShell, APIs, and security-orchestration platforms.
• Automate configuration validation, evidence collection, alert enrichment, reporting, and security-control verification; integrate security platforms to improve visibility and consistency.
• Provide technical security-engineering assistance during incidents escalated by Security Operations, including log analysis, control validation, and configuration changes.
• Support containment, detection enhancements, remediation activities, post-incident reviews, and corrective actions addressing security-control gaps.
• Participate in the incident on-call rotation and periodic security assessments and control reviews.
• Support security and compliance initiatives involving NIST, CIS, SOC 2, PCI DSS, and FedRAMP as applicable.
• Develop and maintain security-engineering procedures, standards, configuration documentation, and operating runbooks; gather evidence for internal audits and external assessments.
• Serve as a technical point of contact for assigned security platforms, technologies, or engineering initiatives.

Minimum qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Systems, or a related technical discipline, or equivalent practical experience.
• 4+ years of professional experience in cybersecurity, security engineering, security operations, or a related technical security discipline.
• Demonstrated experience working with enterprise security technologies and investigating technical security issues.
• Experience collaborating with infrastructure, IT, security, or engineering teams.

Preferred qualifications

• Experience in a SaaS, cloud-native, or enterprise technology organization.
• Experience with public-cloud security technologies, container security, or automated infrastructure security controls.
• Experience developing security automation or integrating security technologies through APIs.
• Exposure to AI-assisted security tools or security assessments involving AI-enabled technologies.
• Familiarity with NIST, CIS, SOC 2, PCI DSS, or FedRAMP.
• Relevant certifications such as CompTIA Security+, CEH, GIAC GSEC, AWS Certified Security – Specialty, or equivalent credentials.

Core technologies

cloud, SaaS, enterprise security technologies, endpoint protection, EDR/XDR, SIEM, cloud security monitoring, vulnerability scanning, identity security, data protection technologies, public cloud, government cloud, segmented cloud environments, cloud security posture management, cloud workload protection, CIS benchmarks, containers, virtual machines, patch-management platforms, AI-enabled security tools, generative AI, AI coding assistants, Python, PowerShell, APIs, security-orchestration platforms, security platforms, log analysis, NIST, SOC 2, PCI DSS, FedRAMP, prompt injection, large language models, AI agents, Bash

Location: Alpharetta, GA (onsite)
Compensation: USD 100,000 - 120,000 per year