Security Engineer II

As a Security Engineer II, you will play a pivotal role in ShipBob's security, governance, risk, and compliance programs. You will design, implement, and maintain access control and threat detection solutions, participate in risk assessments and audits, and collaborate across teams to ensure the confidentiality, integrity, and availability of our critical data and systems.

Requirements

• 4+ years of hands-on work experience with security architecture and engineering in a cybersecurity operations program.
• 2+ years of experience in incident response, detection, threat intelligence, or access control security engineering roles.
• 1+ years' security experience focused on risk and compliance, including ISO 27001 and SOC 2 audits.
• Strong knowledge and experience with access control frameworks and tools (IAM, RBAC, ABAC, OAuth, SAML), cloud security, network security, endpoint security, and threat intelligence.
• In-depth knowledge of Azure services (especially Azure Active Directory, Azure AD Identity Protection, Azure RBAC), and experience securing cloud-based infrastructures (Azure, M365, Google Workspace, Salesforce).
• Proficiency in scripting languages such as Python, PowerShell, Go, or Bash.
• Excellent knowledge of industry-standard frameworks (MITRE ATT&CK, ISO 27001, SOC 2, NIST CSF, PCI, SOX, GDPR).
• Experience with GRC tools and standard practices.
• Proven ability to manage multiple risk and compliance projects.
• Strong written and verbal communication; effective collaborator with outstanding interpersonal skills.
• Excellent analytical and problem-solving skills supporting business objectives.
• Detail-oriented, organized, and able to balance precision with big-picture thinking.
• Quick learner who proactively drives personal and professional growth.
• Demonstrated initiative and ownership in problem-solving.
• Strong design and solution implementation skills for a Zero Trust Architecture.
• Desire to solve response challenges with automation.
• Security+, CISSP, CISA, CISM, CRISC, GCIA, GCIH, GREM, or similar certifications preferred; equivalent experience accepted.

Benefits

• Medical, Term & Accidental Insurance
• All Purpose Leave (casual & sick time): 12 days
• Earned Leave: 15 days
• Public Holiday: 12 days
• Generous Maternity & Paternity Leave
• Quarterly Wellness Day
• Work From Home Allowance