Cybersecurity Engineer II

Saltu Staffing; Austin (TX); On-site; USD 110,000 - 165,000; Full time

Job summary

Saltu Staffing seeks a Cybersecurity Engineer II for a large global law firm in Austin, TX. You will join the Security Governance team to assess risk across new technologies, IT projects, and third-party vendors, maturing vulnerability management and defining security controls.

You will mentor junior engineers, coordinate remediation, and communicate security matters to non-technical stakeholders while supporting policies and long-term strategy.

Qualifications

• 5+ years of direct experience in security assessments or vulnerability management.
• Bachelor's degree in IT or related field, or equivalent hands-on experience.
• Product security assessment experience in Windows and Unix environments.
• Knowledge of IT security controls, enterprise infrastructure, and cloud platforms, especially Azure IaaS/SaaS.
• Familiarity with ISO 27001, NIST, SOC, and SIG frameworks.
• Hands-on experience with vulnerability scanning tools, IAM, authentication systems, EDR, firewalls, IDS/IPS, encryption, and log analysis.
• Strong communication for non-technical audiences; self-directed, collaborative, analytical.

Responsibilities

• Assess security risks for new technologies, IT projects, and third-party vendors.
• Respond to client and partner security questionnaires and audits.
• Mature vulnerability management and assessment programs, with metrics and documentation.
• Monitor emerging threats, triage findings, and coordinate remediation.
• Work with security architecture to deploy security controls.
• Advise staff, leaders, and attorneys on security matters.
• Maintain security policies, standards, procedures, and support long-term strategy.
• Mentor and develop junior cybersecurity engineers.

Skills

Security assessments

Vulnerability management

Cloud security

Log analysis

Communication skills

Collaborative / self-directed

Education

Bachelor's degree in IT or related field

Tools

Azure IaaS/SaaS

IAM

EDR

Firewalls

IDS/IPS

Encryption

Job description

Our client is a large, global law firm with offices across the U.S. and internationally. The firm offers a collaborative, high-performance environment, a comprehensive benefits package, and strong investment in professional development.

Position Overview

Our client is seeking a Cybersecurity Engineer II to join its Security Governance team. This role assesses security risk across new technologies, IT projects, and third-party vendors, and helps mature the firm’s vulnerability management program.

Key Responsibilities

• Assess security risks for new technologies, IT projects, and third-party vendors.


• Respond to client and partner security questionnaires and audits.


• Mature vulnerability management and assessment programs, including metrics and documentation.


• Monitor emerging threats, triage findings, and coordinate remediation.


• Work with security architecture and technical teams to select and deploy security controls.


• Advise technical staff, business leaders, and attorneys on security matters.


• Help maintain security policies, standards, and procedures, and support long-term strategy and exception management.


• Mentor and develop junior cybersecurity engineers.

Required Qualifications

• 5+ years of direct experience in security assessments, vulnerability management, or related cybersecurity functions.


• Bachelor's degree in IT or a related field, or equivalent hands-on experience.


• Product security assessment experience in Windows and Unix environments.


• Knowledge of IT security controls, enterprise infrastructure, and cloud platforms, especially Microsoft Azure IaaS and SaaS.


• Familiarity with ISO 27001, NIST, SOC, and SIG frameworks.


• Hands-on experience with vulnerability scanning tools, IAM, authentication systems, EDR, firewalls, IDS/IPS, encryption, and log analysis.


• Strong communication skills for non-technical audiences, and a self-directed, collaborative, analytical approach.

Preferred Qualifications

• Scripting or automation skills (Python, PowerShell, APIs).


• CISSP, CEH, or OSCP certification.

Corp-to-Corp (C2C)

This position is not open to Corp-to-Corp (C2C) arrangements. Candidates must be able to work directly as W-2 employees.