Engineer II- Product Security (US, Remote)

About This Opportunity

We are representing a confidential medical device organization in their search for an Engineer II - Product Security to join their Global Product Security Engineering team. This fully remote position (anywhere in the United States) focuses on cloud security operations, monitoring, and detection engineering across AWS and Azure environments.

Our client is seeking a security professional with foundational cloud security experience who is ready to build depth across the engineering security discipline. You'll play a critical role in securing software delivery environments while supporting compliance initiatives including SOC 2 and HIPAA readiness.

Responsibilities

• Cloud Security Monitoring & Detection: Monitor and triage security findings using CSPM/CNAPP tooling, AWS Security Hub, GuardDuty, and Azure Defender for Cloud; assess severity, distinguish true from false positives, and escalate confirmed findings per established procedures
• Detection Rule Management: Support maintenance and tuning of detection rules, alert policies, and thresholds to reduce noise and improve signal fidelity; identify coverage gaps and recommend adjustments
• Tooling & Pipeline Health: Monitor security tooling and log ingestion pipelines, ensuring log sources are active and flowing correctly; verify cloud security services are properly enabled across all engineering accounts and subscriptions
• Security Architecture: Design security architecture for components and functional systems; recommend alterations to development and design to improve product security
• Threat Modeling: Conduct structured threat modeling (e.g., STRIDE) to identify potential threats and vulnerabilities, rate associated risks, and design mitigations with proper documentation
• Incident Response: Contribute to incident response playbooks and triage runbooks; participate in triage, containment support, evidence collection, and post-incident documentation
• Compliance Support: Support compliance activities related to SOC 2 and HIPAA audit readiness including evidence collection, control documentation, and gap tracking
• Security Reporting: Contribute to security reporting including finding summaries, remediation tracking, and tool health status for leadership and compliance stakeholders
• Cross-functional Collaboration: Partner with Software Engineering to implement Security-by-Design and Privacy-by-Design principles; collaborate with Legal, Compliance, and IT teams on regulatory requirements

What We're Looking For

Required Qualifications:

• Bachelor's degree in Engineering (Mechanical, Biomedical, Electrical, or Software), Computer Science, Information Security, or Cybersecurity
• 2+ years of experience in cloud security, security operations, or related security engineering role
• Cloud Threat Detection & Visibility: Hands-on experience monitoring and investigating security findings in cloud environments; working experience with AWS and/or Azure security services (Security Hub, GuardDuty, Azure Defender for Cloud), CSPM or CNAPP platforms
• Security Log Management: Experience with log source validation, ingestion health monitoring, and coverage gap identification across AWS and Azure
• Identity & Access Security: Experience with identity federation, lifecycle management, and RBAC using Okta and/or Microsoft Entra ID (SAML/SSO)
• Automation & Scripting: Scripting skills in Python, Bash, or PowerShell for automation and tooling
• Knowledge of System and Software Development Processes and Lifecycles
• Knowledge of application security best practices

Preferred Qualifications:

• Experience with Wiz platform
• Detection engineering fundamentals: alert tuning, false positive analysis, detection rule management, and runbook development
• Experience with Kubernetes, Argo, and Terraform security best practices
• AWS Security Specialty or Microsoft Azure Security Engineer (AZ-500) certification

How We Work With You

When you apply through Get A Job.ai, our talent team will review your qualifications and conduct an initial screening. If there's a strong match, we'll submit your profile to our client for consideration. Please do not contact the client directly—all communication and coordination will flow through our recruiting team to ensure the best experience for everyone involved.

Pay

Compensation details will be discussed during the screening process based on experience and qualifications.

Equal Employment Opportunity: Get A Job.ai is committed to providing equal employment opportunities to all applicants regardless of race, color, religion, age, sex, sexual orientation, gender identity, national origin, disability, protected veteran status, or any other status protected by law.