We are looking for a Cybersecurity Specialist II to strengthen our defenses and accelerate our adoption of AI-driven security workflows. This is a mid-level role for an experienced security professional who can operate independently, design effective detection and response systems, and drive automation projects that scale security across the organization.

The right candidate blends technical depth with creative problem solving and brings proven experience in building and deploying AI-enabled workflows that reduce noise, improve accuracy, and enable faster response. This role will directly influence how we evolve our security operations, vulnerability management, and evolve our security practices.

Core Responsibilities

• Security Operations & Detection
• Own and improve systems for detection, response, and prevention across cloud, infrastructure, and enterprise applications.
• Develop and maintain detection logic (Sigma, YARA, KQL, custom rules) and ensure effective coverage of MITRE ATT&CK techniques.
• Lead investigation efforts and drive incident response activities through resolution.
• AI & Security Automation
• Architect and implement AI-driven workflows (n8n, LangChain, Gemini (Gems), ChatGPT integrations) for alert triage, enrichment, threat correlation, and incident reporting.
• Lead initiatives to automate evidence collection, playbook execution, and forensic data enrichment.
• Evaluate security risks of AI tools and frameworks used internally and recommend safe adoption patterns.
• Mentor junior staff in using AI securely and effectively.
• Incident Response & Threat Modeling
• Serve as an escalation point during security incidents, leading containment and eradication efforts.
• Contribute to advanced threat modeling, red/blue team exercises, and adversary emulation scenarios.
• Maintain and refine incident response playbooks, embedding automation and AI where possible.
• Vulnerability & Risk Management
• Run vulnerability scans, analyze results, and coordinate with IT/Engineering to prioritize and remediate issues.
• Provide risk assessments for new tools, systems, and integrations, with an emphasis on AI/LLM usage.
• Compliance & Secure Development
• Partner with compliance and audit stakeholders to implement and evidence SOC 2, ISO 27001, or similar controls.
• Act as a security liaison to engineering teams, promoting secure coding practices and conducting lightweight code reviews or pipeline checks.
• Metrics, Reporting & Continuous Improvement
• Track and report security KPIs (mean time to detect/respond, automation coverage, AI impact on triage).
• Recommend and implement improvements to detection logic, workflows, and team processes.

Minimum Qualifications

• 3–5 years of experience in cybersecurity engineering, security operations, or a related technical security role.
• Hands-on experience with AI or automation frameworks (SOAR, n8n, LangChain, vector databases, or LLM-based agents).
• Strong detection engineering skills (query languages, rule writing, log analysis).
• Incident response experience, including containment and eradication activities.
• Proficiency with scripting (Python, PowerShell, or equivalent).
• Strong understanding of security frameworks (MITRE ATT&CK, NIST, kill chain).
• Comfortable collaborating across infrastructure, application, development, and IT domains.

Preferred Qualifications

• Experience leading incident response efforts or red/blue team exercises.
• Prior experience building or managing AI-augmented workflows in production security environments.
• Familiarity with cloud-native security controls (Google Cloud Platform, Heroku, and/or Azure).
• Knowledge of secure SDLC practices and integration into CI/CD pipelines.
• Relevant certifications (CySA+, GSEC, GCIA, or AI/automation-related certifications) are a plus.