Find & Apply For Cyber / Information Security Engineer / Analyst Jobs in Fountain Valley, California

Job Description The Information Security Engineer II is responsible for the engineering, architecture, implementation, integration, optimization, and ongoing improvement of enterprise information security technologies.

This position is a hands-on security engineering role focused on designing and enhancing security capabilities across the organization's cybersecurity technology portfolio. The Engineer will work closely with Information Security, Infrastructure, Cloud, IAM, Network, Application, and other technology teams to develop secure, scalable, and automated solutions.

A significant focus of this position will be security orchestration and automation using Palo Alto Cortex XSOAR, including the development and maintenance of playbooks, integrations, automations, and workflows.

The position will also support the organization's growing Artificial Intelligence Security program, including evaluating and engineering controls to protect the use of Generative AI, Large Language Models, AI-enabled applications, AI agents, and emerging AI technologies.

This is not a primary Security Operations Center or incident-response position. However, the Engineer must understand the security incident response lifecycle and be capable of engineering technologies, integrations, workflows, and automations that support detection, investigation, containment, remediation, and recovery activities.

What This Role Is NotThis position is not intended to function primarily as:

A SOC AnalystAn incident queue analystA primary incident responderA help-desk or desktop-support engineerA vulnerability scanning operatorA firewall-rule administratorThe Engineer may assist with complex security events or investigations when engineering expertise is required, but the primary responsibility of the role is to design, build, automate, integrate, architect, and improve security capabilities.

Indicators of SuccessA successful Information Security Engineer II will:

Deliver reliable and maintainable security automation.

Increase the use of XSOAR automation across repeatable security processes.

Reduce manual security-engineering and operational workflows.

Improve integration between cybersecurity technologies.

Successfully engineer and operationalize new security capabilities.

Help establish technical controls for secure enterprise AI adoption.

Improve visibility and security across cloud environments.

Develop reusable security architecture patterns and engineering standards.

Improve the reliability, scalability, and effectiveness of existing cybersecurity platforms.

Identify opportunities to obtain greater value from the organization's existing cybersecurity investments.

Eligible states for remote work:

AL, AZ, FL, CA, CO, GA, ID, IL, KY, KS, MA, MD, MO, MT, NE, NV, NC, OK, OH, TN, TX, UT, WA, WY

Skills and Requirements Required Technical SkillsExperience in cybersecurity engineering, security architecture, information security, infrastructure security, or a related technical discipline.

Hands-on experience implementing, integrating, configuring, or supporting enterprise cybersecurity technologies.

Hands-on experience with security orchestration, automation, and response technologies, preferably Palo Alto Cortex XSOAR.Demonstrated experience developing or modifying security automation workflows and playbooks.

Experience integrating technologies using REST APIs, JSON, webhooks, or similar integration technologies.

Working knowledge of scripting or programming, preferably:

PythonPowerShellJavaScript or similar scripting languagesUnderstanding of enterprise networking concepts including TCP/IP, DNS, HTTP/HTTPS, firewalls, proxies, routing, segmentation, and network security controls.

Understanding of endpoint security concepts and technologies.

Understanding of identity and access management concepts including authentication, authorization, MFA, privileged access, and least privilege.

Understanding of vulnerability management and security configuration concepts.

Ability to troubleshoot complex technical issues across multiple systems and security platforms.

Ability to create technical documentation, architecture diagrams, implementation procedures, and operational documentation.

Security Operations KnowledgeAlthough this position is not responsible for primary incident-response operations, candidates must understand the security incident response lifecycle, including:

PreparationDetection and AnalysisContainmentEradicationRecoveryPost-Incident Activities / Lessons LearnedThe Engineer should understand how cybersecurity technologies and automation can support each stage of the incident lifecycle.

Required AI Security KnowledgeCandidates should demonstrate knowledge of emerging AI and Generative AI security concepts.

Experience may include securing or evaluating:

Generative AI platformsLarge Language ModelsAI applicationsAI agentsCopilot-style technologiesAI APIs and integrationsRetrieval-Augmented Generation architecturesEnterprise AI platformsCandidates should understand common AI security concerns including prompt injection, sensitive data exposure, excessive agency, insecure output handling, AI application access controls, and third-party AI risks.

Deep AI development or machine-learning engineering experience is not required, but candidates should demonstrate a strong interest in AI Security and the ability to rapidly develop expertise in emerging AI technologies.

The following qualifications are highly desirable but are not required.

Cloud SecurityExperience securing AWS and/or Microsoft Azure environments.

Experience with Cloud Security Posture Management or Cloud-Native Application Protection Platforms.

Experience with platforms such as Wiz or comparable cloud security technologies.

Understanding of cloud IAM, workloads, containers, Kubernetes, serverless technologies, and cloud-native security controls.

Familiarity with Infrastructure as Code technologies such as Terraform.

Familiarity with security within CI/CD and DevSecOps environments.

Security AutomationAdvanced Cortex XSOAR playbook development experience.

Development of custom XSOAR integrations or automation scripts.

Python development experience.

Experience working with REST APIs and API authentication.

Experience using Git or other version-control systems.

Experience developing reusable automation components and security engineering frameworks.

Security Technology ExperienceExperience with one or more technologies such as:

Palo Alto Cortex XSOARPalo Alto Cortex XDRPalo Alto Networks Next-Generation FirewallsPrisma AccessWizTaniumProofpointBeyondTrustClarotyRecorded FutureMicrosoft security technologiesAWS security technologiesAzure security technologiesSIEM, SOAR, EDR, NDR, CSPM, CNAPP, ITDR, PAM, or vulnerability-management platformsExperience with these specific products is preferred but equivalent experience with comparable enterprise security platforms is acceptable. We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal employment opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment without regard to race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or the recruiting process, please send a request to HR@insightglobal.com.