Security Engineer II

Cybersecurity Jobs; Alpharetta (GA); Hybrid; USD 102,000 - 135,000; Full time

Benefits offered by this job

Health benefits

401(k) plan

Paid time off

Career growth

Volunteer opportunities

Job summary

Barracuda is seeking a hands-on security operations professional to operationalize and improve controls across cloud, identity, endpoints, and automation in Alpharetta. The role focuses on deploying and tuning security technologies, building posture management capabilities, and automating reviews using Python, PowerShell, and SQL.

The ideal candidate will have a Bachelor’s degree in CS, 2 years of security experience, and hands-on experience with Azure/AWS, IAM concepts, CyberArk, Wiz,

Qualifications

• ,

Responsibilities

• Configure, deploy, and tune security technologies across Barracuda’s cloud and enterprise environment to improve strength, coverage, timeliness, and auditability of security controls.
• Build and operate cloud, SaaS, and network security posture management capabilities (CSPM, SSPM, NSPM) using platforms such as Wiz, CrowdStrike, or AlgoSec.
• Onboard SaaS platforms into security posture management through API integrations and service-account configurations, coordinating with application owners to expand control coverage.
• Engineer and harden identity and access management controls in a cloud identity platform such as Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM), MFA, and provisioning of cloud administrator accounts.
• Administer privileged access management (PAM) using a solution such as CyberArk, including account onboarding, safe creation and assignment, access monitoring, and integrations with security tools.
• Automate recurring security reviews and configuration drift detection (for example, changes to Conditional Access and Named Location) using scripting and job-scheduling tools such as Python, PowerShell, SQL, and Git-based comparisons.
• Develop automated security reporting and dashboards using Python, SQL, and Power BI to track control status, coverage, and timeliness for stakeholders and auditors.
• Manage endpoint security and device compliance through mobile device management tooling such as Microsoft Intune, including scheduled and on-demand policy updates.
• Support the break-glass and emergency-access program to ensure critical controls are resilient, monitored, and audit-ready.

Skills

Cloud security

Microsoft Azure

AWS

IAM concepts

PIM

MFA

Python

PowerShell

SQL

Git

Power BI

Intune

Education

Bachelor's degree in CS or related field

Tools

CyberArk

Wiz

CrowdStrike

AlgoSec

Git

PowerShell

SQL

Python

Job description

Hands-on role focused on operationalizing and improving security controls across cloud, identity, endpoints, and automation.

Responsibilities

• Configure, deploy, and tune security technologies across Barracuda’s cloud and enterprise environment to improve strength, coverage, timeliness, and auditability of security controls.
• Build and operate cloud, SaaS, and network security posture management capabilities (CSPM, SSPM, NSPM) using platforms such as Wiz, CrowdStrike, or AlgoSec.
• Onboard SaaS platforms into security posture management through API integrations and service-account configurations, coordinating with application owners to expand control coverage.
• Engineer and harden identity and access management controls in a cloud identity platform such as Microsoft Entra ID, including Conditional Access, Privileged Identity Management (PIM), MFA, and provisioning of cloud administrator accounts.
• Administer privileged access management (PAM) using a solution such as CyberArk, including account onboarding, safe creation and assignment, access monitoring, and integrations with security tools.
• Automate recurring security reviews and configuration drift detection (for example, changes to Conditional Access and Named Location) using scripting and job-scheduling tools such as Python, PowerShell, SQL, and Git-based comparisons.
• Develop automated security reporting and dashboards using Python, SQL, and Power BI to track control status, coverage, and timeliness for stakeholders and auditors.
• Manage endpoint security and device compliance through mobile device management tooling such as Microsoft Intune, including scheduled and on-demand policy updates.
• Support the break-glass and emergency-access program to ensure critical controls are resilient, monitored, and audit-ready.

Requirements

• Bachelor’s degree in Computer Science or a related field and 2 years of relevant security experience, or an equivalent combination of education and experience.
• Hands-on experience configuring and deploying security technologies across cloud environments such as Microsoft Azure or AWS.
• Working knowledge of identity and access management concepts and tooling, including Microsoft Entra ID, Conditional Access, PIM, MFA, and PAM solutions such as CyberArk.
• Experience with cloud and SaaS security posture tooling across CSPM, SSPM, and NSPM (for example Wiz, CrowdStrike, AlgoSec).
• Proficiency in scripting and automation with Python, PowerShell, and SQL, using Git source control and job scheduling to build repeatable, auditable processes.
• Ability to build security reporting and metrics using Power BI to improve timeliness and visibility of control status.
• Familiarity with endpoint management and compliance tooling such as Microsoft Intune, plus experience working with log and event data for security monitoring.
• Strong documentation and communication skills with a collaborative approach across engineering, IT, and security teams.
• Exposure to security compliance frameworks such as SOC 2, ISO 27001, and NIST CSF; relevant certifications are a plus.

Technologies

• Microsoft Azure, AWS
• Microsoft Entra ID, Conditional Access, Privileged Identity Management (PIM), MFA
• CyberArk
• Wiz, CrowdStrike, AlgoSec
• CSPM, SSPM, NSPM
• API integrations, service-account configurations
• Python, PowerShell, SQL, Git, Named Location changes
• Power BI
• Microsoft Intune

Compensation

• USD 102,000 - 135,000 per year
• Compensation depends on factors including experience, qualifications, and work location.
• May be eligible for bonuses and equity; final compensation determined by the selected candidate’s qualifications.
• Compensation and benefits are subject to change and may vary by location and level.

Benefits

• Equity in the form of non-qualifying options
• High-quality health benefits
• Retirement Plan with employer match
• Career-growth opportunities
• Flexible Time Off and Paid Time Off
• Volunteer opportunities

What You’ll Get From Us

• A team culture where you can voice your opinion and make an impact
• Internal mobility, including cross training and opportunities to reach your next career step within Barracuda

Location: Alpharetta, GA (hybrid)