Security Engineer II

Overview

We are seeking a highly skilled Security Engineer II to join our Information Security team. This role will play a key part in managing, administrating, reporting and identifying enhancements for our security solutions and assisting with implementation across cloud and on-premises environments. The Security Engineer II will collaborate with IT Security, Infrastructure and Application teams to ensure that security processes and standards are embedded into technology solutions.

Responsibilities

Manage the day-to-day operations and processes of security solutions following the organization’s enterprise security strategy, business goals and regulatory requirements.

Serve as a technical administrator and advisor, managing security solutions across network, endpoint, cloud, identity, and application layers.

Assist in the integration and operation of security technologies, ensuring scalability, resilience, and alignment with security best practices.

Partner with project teams to implement and operationalize new security tools, platforms, and services to improve the organization’s security posture.

Collaborate with infrastructure and application teams to ensure secure system and application processes.

Provide expertise in incident response, process creation, and risk mitigation as needed.

Assist with developing and maintaining security standards, policies, and process documentation.

Mentor junior security staff and contribute to a culture of security awareness across the organization.

Performs other functionally related duties as assigned.

Qualifications

Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or a related field (or equivalent professional experience).

3+ years of experience in information security engineering or IT security.

Proven experience in security solution administration and operational designs for enterprise-scale environments.

Hands-on experience with security technologies such as Vulnerability Management (Tenable preferred), SIEM, EDR, IAM, PAM, cloud security platforms, DLP, and firewalls.

Strong understanding of cloud platforms (Azure, AWS, or GCP) and hybrid identity environments (e.g., Entra ID/Azure AD, on-prem AD).

Demonstrated experience assisting with technology implementation projects where security requirements were core to success.

Knowledge of security frameworks and regulations (NIST CSF, ISO 27001, HIPAA, PCI, SOX, NYDFS, etc.).

Excellent communication skills, with the ability to define and present recommendations for application/operational enhancements.

Familiarity with DevSecOps practices and secure SDLC.

Industry certifications such as CISSP, OSCP, GIAC (or equivalent) are a plus.

#LI-BL1

What We Offer

AmTrust Financial Services offers a competitive compensation package and excellent career advancement opportunities. Our benefits include Medical & Dental Plans, Life Insurance, including eligible spouses & children, Health Care Flexible Spending, Dependent Care, 401k Savings Plans, Paid Time Off.

AmTrust strives to create a diverse and inclusive culture where thoughts and ideas of all employees are appreciated and respected. This concept encompasses but is not limited to human differences with regard to race, ethnicity, gender, sexual orientation, culture, religion or disabilities.

AmTrust values excellence and recognizes that by embracing the diverse backgrounds, skills, and perspectives of its workforce, it will sustain a competitive advantage and remain an employer of choice. Diversity is a business imperative, enabling us to attract, retain and develop the best talent available. We see diversity as more than just policies and practices. It is an integral part of who we are as a company, how we operate and how we see our future.