Cybersecurity Engineer II

Love's Travel Stops; Oklahoma City (OK); On-site; USD 110,000 - 140,000; Full time

Benefits offered by this job

Tuition assistance

Paid Time Off

401(k) – 100% Match up to 5%

Medical/Dental/Vision Insurance after

Competitive Pay

Career Development

Job summary

Love's Travel Stops in Oklahoma City is seeking a Cyber Security Engineer II to perform hands-on security engineering and operations across on-premises, cloud, and hybrid environments. You will design, implement, and maintain enterprise security solutions, develop detections, and contribute to automation and incident response within our security program.

The role collaborates with internal teams and service providers, participates in threat hunting, and supports after-hours escalation on a

Qualifications

• Bachelor's degree in Cyber Security, Information Security, Computer Science, or a related field preferred; equivalent relevant education and experience may be considered.
• CISSP, GCIH, GCFA, GCIA, CySA+, CCSP, a cloud security certification, or another relevant security certification strongly preferred.
• Minimum of two years of related Information Security experience required; three years strongly preferred.
• Hands-on experience in security operations, incident response, and/or detection engineering required.
• Experience investigating and responding to security incidents required.
• Experience developing detections, queries, or hunts in a SIEM or similar analytics platform required.
• Experience administering and maintaining security tools and platforms required.
• Experience with scripting, security automation, or API-based integrations required.
• General IT experience in systems administration, network administration, cloud engineering, or a related discipline required.
• Experience with cloud and hybrid environment security preferred.
• Experience applying artificial intelligence or large language model tools to investigation, analysis, or automation workflows preferred.

Responsibilities

• Support the design, implementation, maintenance, and optimization of enterprise security solutions that detect, prevent, and respond to threats across on-premises, cloud, and hybrid environments, following established security standards and architectural guidance.
• Develop, test, and tune threat detections aligned to MITRE ATT&CK using established detection-engineering standards and guidance from senior team members to improve alert quality and response effectiveness.
• Investigate, triage, document, and respond to security events and incidents in partnership with internal teams and managed service providers; escalates complex or high-impact matters in accordance with incident-response procedures.
• Participate in post-incident reviews and complete assigned remediation, documentation, and process-improvement activities.
• Develop and maintain security automation, orchestration, and API-based integrations using established patterns, with guidance on complex implementations.
• Use artificial intelligence and large language model tools to support investigations, threat hunting, detection engineering, and automation; validate outputs for accuracy, security, and appropriate use.
• Administer, monitor, maintain, and optimize security tools and platforms, including configuration, upgrades, integrations, health monitoring, runbooks, playbooks, and technical documentation.
• Participate in structured threat-hunting activities and apply relevant threat intelligence to identify suspicious activity and strengthen detections.
• Identify potential security gaps in cloud and hybrid environments and contribute to recommendations and implementation activities that reduce risk.
• Participate in the weekly rotating on-call schedule and provide after-hours and weekend escalation support as assigned.
• Share knowledge with less-experienced team members, contribute to peer learning, represent Information Security on assigned projects, and collaborate with third-party vendors and service providers.
• Perform other duties as assigned.

Skills

Security operations

Incident response

Threat hunting

Threat detection

SIEM

API automation

Python

PowerShell

Cloud security

On-prem & cloud

MITRE ATT&CK

NIST framework

Education

Bachelor's degree in Cyber Security/Info Security/CS

CISSP

GCIH

GCFA

GCIA

CySA+

CCSP

Tools

SIEM

EDR

Email security

Vulnerability management

Automation tools

Job description

Benefits:

• Fuel Your Growth with Love's - company funded tuition assistance
• Paid Time Off
• 401(k) – 100% Match up to 5%
• Medical/Dental/Vision Insurance after 30 days
• Competitive Pay
• Career Development

Welcome to Love's:

The Cyber Security Engineer II - Security Operations performs hands-on security engineering and operational work of moderate scope to help detect, investigate, and respond to threats across the company's on-premises, cloud, and hybrid environments. Working within established security architecture, standards, and response procedures, this role supports the design, implementation, and maintenance of enterprise security solutions; develops and tunes detections; maintains security tools; and contributes to automation, incident response, and threat-hunting activities. The position collaborates with internal teams and service providers, escalates highly complex issues, shares knowledge with less-experienced team members, and uses artificial intelligence tools responsibly to improve productivity and efficiency.

Major Responsibilities:

• Support the design, implementation, maintenance, and optimization of enterprise security solutions that detect, prevent, and respond to threats across on-premises, cloud, and hybrid environments, following established security standards and architectural guidance.
• Develop, test, and tune threat detections aligned to MITRE ATT&CK using established detection-engineering standards and guidance from senior team members to improve alert quality and response effectiveness.
• Investigate, triage, document, and respond to security events and incidents in partnership with internal teams and managed service providers; escalates complex or high-impact matters in accordance with incident-response procedures.
• Participate in post-incident reviews and complete assigned remediation, documentation, and process-improvement activities.
• Develop and maintain security automation, orchestration, and API-based integrations using established patterns, with guidance on complex implementations.
• Use artificial intelligence and large language model tools to support investigations, threat hunting, detection engineering, and automation; validate outputs for accuracy, security, and appropriate use.
• Administer, monitor, maintain, and optimize security tools and platforms, including configuration, upgrades, integrations, health monitoring, runbooks, playbooks, and technical documentation.
• Participate in structured threat-hunting activities and apply relevant threat intelligence to identify suspicious activity and strengthen detections.
• Identify potential security gaps in cloud and hybrid environments and contribute to recommendations and implementation activities that reduce risk.
• Participate in the weekly rotating on-call schedule and provide after-hours and weekend escalation support as assigned.
• Share knowledge with less-experienced team members, contribute to peer learning, represent Information Security on assigned projects, and collaborate with third-party vendors and service providers.
• Perform other duties as assigned.

Education and Experience:

Education:

• Bachelor's degree in Cyber Security, Information Security, Computer Science, or a related field preferred; equivalent relevant education and experience may be considered.
• CISSP, GCIH, GCFA, GCIA, CySA+, CCSP, a cloud security certification, or another relevant security certification strongly preferred.

Experience:

• Minimum of two years of related Information Security experience required; three years strongly preferred.
• Hands-on experience in security operations, incident response, and/or detection engineering required.
• Experience investigating and responding to security incidents required.
• Experience developing detections, queries, or hunts in a SIEM or similar analytics platform required.
• Experience administering and maintaining security tools and platforms required.
• Experience with scripting, security automation, or API-based integrations required.
• General IT experience in systems administration, network administration, cloud engineering, or a related discipline required.
• Experience with cloud and hybrid environment security preferred.
• Experience applying artificial intelligence or large language model tools to investigation, analysis, or automation workflows preferred.

Skills and Physical Demands:

Skills:

• Working knowledge of security operations, incident response, threat detection and hunting, endpoint security, network security, identity and access management, vulnerability management, and cloud platform security.
• Hands-on capability with SIEM or comparable analytics platforms, including queries, detections, and investigations.
• Experience administering security tools such as SIEM, endpoint detection and response, email security, or vulnerability-management platforms.
• Working proficiency in at least one scripting or programming language, such as Python or PowerShell, for automation and integrations.
• Ability to develop API-based security automation or orchestration workflows using established patterns.Familiarity with the NIST Cybersecurity Framework and MITRE ATT&CK familiarity with PCI DSS is preferred.
• Understanding of infrastructure, endpoint, network, cloud, and hybrid technologies.
• AI awareness and the ability to use approved AI tools to drive productivity and efficiency while validating outputs.
• Ability to analyze problems of moderate scope, exercise sound judgment within established procedures, and seek guidance on new or complex assignments.
• Ability to translate technical information into business risk and clear, actionable guidance.
• Strong written, oral, interpersonal, and customer-service skills.
• Ability to prioritize work, manage competing demands, and make sound decisions in high-pressure situations.
• High attention to detail, initiative, adaptability, and commitment to continuous learning.
• Ability to work effectively in a collaborative, team-oriented environment and build productive internal and external working relationships.
• Ability to conduct research, document findings, and communicate recommendations in user-friendly language.

Typical Physical Demands:

• Requires prolonged sitting, some bending and stooping.
• Eye strain associated with screen use.
• Manual dexterity sufficient to operate a computer keyboard and calculator.
• Occasional lifting up to 25 pounds.
• Requires normal range of hearing and vision.
• Additional hours may be necessary.
• Participates in a weekly rotating on-call schedule and must be available for assigned after-hours and weekend escalations.

Our Culture:

Fueling customers' journeys since 1964, innovation leads the way for this family-owned and operated business headquartered in Oklahoma City. With nearly 40,000 team members, travel stops are the core business along with products and services that provide value for professional drivers, fleets, traveling public, RVers, alternative energy and wholesale fuel customers. Giving back to communities and an inclusive workplace are hallmarks of the award-winning culture.

Love's is an Equal Opportunity Employer. Veterans encouraged to apply.