Information Security Engineer II

Summary:

Responsible for supporting the technical administration of information security tools and systems, including day-to-day configuration, patching, and monitoring. Provides hands-on engineering support to the security team, supporting core infrastructure, vulnerability management, and Identity and Access Management (IAM) work, while monitoring threat intelligence and supporting the security awareness program. Partners closely with the IAM team on access and licensing requests and contributes to team reporting and metrics.

Essential Job Duties:

• Support administration of information security tool infrastructure (setup, versioning, patching, monitoring, health checks), taking on lower-complexity engineering tasks currently handled by senior engineers.
• Support administration and maintenance of SIEM platforms, including log ingestion, parsing, normalization, and retention.
• Support administration and maintenance of Microsoft Entra ID, including users, groups, service principals, and enterprise applications.
• Monitor vendor threat feeds, CISA KEV, and other relevant sources; track vendor release notes, end-of-life notices, and deprecation timelines across the security tool stack, maintaining a forward-looking upgrade calendar.
• Review and disposition file integrity monitoring alerts and run recurring vulnerability scans, validating findings and removing false positives before handoff to IT/system owners or approved change requests.
• Partner with the IAM team to support access provisioning, deprovisioning, and periodic access review requests.
• Assist with implementing and maintaining system configuration standards to reduce organizational risk, and support research into current and prospective security products, including basic vendor coordination.
• Assist with troubleshooting and resolving engineering-level issues escalated from the SOC or IT infrastructure teams.
• Assist with documentation of security engineering processes, configurations, and standard procedures, and support reporting efforts related to security engineering and IAM functions, including compiling metrics for team performance tracking and executive/board-level reporting.
• Support administration of the Security Awareness program, including training configuration, phishing simulation campaigns, and engagement tracking, providing reporting to management as requested.
• Other duties as assigned.

Skills:

• Working knowledge of operating systems, IT systems, and security practices.
• SIEM experience
• Azure cloud experience
• Working knowledge of Active Directory
• Basic scripting or automation experience a plus.
• Good communication and interpersonal skills.
• Good documentation and reporting skills.
• Proven ability to grow through self-study.
• General experience using AI tools to support daily work and productivity.

Behaviors & Attributes:

• Adaptability / Flexibility
• Analysis / Problem Assessment
• Attention to Detail
• Customer Focus
• Initiative
• Innovation
• Integrity
• Results Oriented
• Stress Tolerance
• Teamwork / Collaboration
• Technical / Professional Knowledge

Reporting Relationships:

• Works under general supervision and instruction from Team Leads.
• Reports directly to CISO

Credentials:

Required:

• 2-4 years of IT experience
• Exposure to multiple technology stacks
• Proficiency in English language

Preferred:

• Related work or Military experience will be considered
• Progress toward CompTIA, CISA, CISSP, or CIA certifications
• Familiarity with security vendor products
• Exposure to regulatory requirements such as SOX, PCI, and GDPR
• Familiarity with various cyber frameworks
• Proficiency in Portuguese language
• Automation experience

Physical Requirements:

• Ability to sit at a computer terminal for long periods of time.
• Ability to be physically in attendance at workstation at designated company office location during normal business hours designated for the position.
• Ability to lift 20 pounds.
• Ability to travel, as required by business needs.

Compensation:

Compensation Range: $80,000 - $100,000

Actual annual salary offered to a candidate will be based on a number of variables including work experience, education and skills/ achievements, and will be mutually agreed upon at the time of offer. This position is not eligible for a variable pay component as part of the hiring range.

While we're committed to providing top-tier solutions, we're just as committed to supporting our own team. Our employees enjoy a variety of comprehensive benefits, including medical/dental/vision coverage, life insurance, and a 401(k) plan with matching provision. Outside of CA, ScanSource grants 128 hours of paid time off (PTO) each calendar year (prorated for date of hire). In the state of CA, employees accrue a set number of hours each pay period equaling the same 128 hours of PTO. ScanSource also celebrates 10 paid company holidays.

ScanSource, Inc. is an Equal Opportunity Employer

EOE/M/F