Cybersecurity Engineer II
Job Description
The Cybersecurity Engineer II at One Step Secure IT designs, implements, and maintains security solutions for the organization and its clients. The role blends hands-on technical work with client-facing collaboration, leading projects, incident response, and regulatory compliance, including Arizona data breach laws, while mentoring junior staff.
Responsibilities
- Create and deploy security controls and architectures tailored to each client environment
- Embed secure development and deployment practices into pipelines and workflows
- Maintain security tooling, processes, and policies aligned with industry standards (NIST, CIS, ISO 27001, HIPAA, PCI DSS)
- Lead vulnerability assessments and penetration testing; drive remediation efforts
- Manage incident response, including stakeholder updates and adherence to Arizona breach notification laws; conduct post-incident reviews
- Develop and revise security policies; deliver training for internal staff and clients
- Mentor junior security engineers and oversee security-related projects
- Monitor security alerts and events using SIEM and related tools
- Support patch management across client environments
- Investigate and report on potential vulnerabilities or breaches
- Prepare regular security reports for senior management and clients
- Assist with audits and regulatory compliance activities
- Collaborate with sales and account management to assess client security needs and design solutions
- Implement automation and advanced tools such as MFA and encryption to scale security across multiple clients
Requirements
- Strong analytical and problem-solving abilities
- Excellent communication skills capable of explaining security concepts to technical and non-technical audiences
- Strong collaboration and client-facing capabilities
- Familiarity with security frameworks (NIST, CIS, ISO 27001)
- Cloud security knowledge (AWS, Azure)
- Understanding of attack vectors and mitigation techniques (phishing, malware, etc.)
- Knowledge of compliance standards (HIPAA, PCI DSS)
- Experience with automation in multi-client environments
Technologies
- AWS, Azure
- SIEM, MFA, encryption
- Windows, Linux, MacOS
- TCP/IP, HTTP, DNS
- NIST, CIS, ISO 27001
Benefits
- 401(k)
- 401(k) matching
- Dental insurance
- Flexible spending account
- Health insurance
- Health savings account
- Life insurance
- Paid time off
- Vision insurance
About the Role
The Security Solutions Engineer, Level 2, is accountable for designing, implementing, and maintaining security solutions that protect both One Step Secure IT and its clients. The position leads projects, manages incident response, ensures compliance with industry standards and state regulations (including Arizona data breach laws), and mentors junior staff.
Preferred Background
- Bachelor’s degree in Computer Science, Information Security, or related field, or equivalent experience
- Certifications such as Security+, CEH, CASP, SSCP, CISSP, or CISM
- 4–6 years of cybersecurity experience, including at least 2 years as a Security Engineer
- Familiarity with NIST, CIS, ISO 27001 and cloud platforms (AWS, Azure)
- Knowledge of network protocols (TCP/IP, HTTP, DNS)
- Experience with firewalls, IDS/IPS, and vulnerability management tools
- Operating systems knowledge (Windows, Linux, MacOS)
- Background in an MSP or multi-client environment highly desirable
- Familiarity with Arizona data breach notification laws (A.R.S. §§ 18-551, 18-552) a plus
Job Type
Full-time
Ability to Commute
Phoenix, AZ 85027 (Required)
Work Location
In person