Security Operations Engineer II

Duck Creek Payments; California, United States, Northern America, Americas; Hybrid; USD 97,000 - 161,000; Full time

Benefits offered by this job

Flexible work environment

Medical, dental, vision, life, and-dis

Disability insurance

Job summary

Duck Creek Technologies is seeking a Security Operations Engineer II to join its Information Security team in the United States. You will analyze, design, implement, monitor, and optimize security systems protecting data and infrastructure.

The role emphasizes incident response, threat management, and collaboration with a global security program. You will support SOC operations, vulnerability management, and secure development lifecycle practices, while staying current with cyber threat

Qualifications

• Bachelor's degree or equivalent in information security, CS, or related field
• 5+ years in cybersecurity or related domains
• CISSP or equivalent certification
• Experience in security operations, incident response, and threat management
• Familiarity with security frameworks, tools, and technologies

Responsibilities

• Analyze, design, implement and monitor security systems and controls
• Provide Tier 2 support for secure remote access and cryptographic controls
• Support SOC operations, incident response, forensics, and post-mortems
• Contribute to risk assessments, policy development, and regulatory compliance
• Assist in security training, DR/BC testing, and vulnerability management
• Collaborate on Secure Development Lifecycle and threat intelligence initiatives

Skills

CISSP

Security operations

Incident response

Threat management

SIEM

IDS/IPS

Cryptography

Education

Bachelor's degree in Information Security, Computer Science, or related field

Tools

SIEM

Firewall

DLP

IDS/IPS

Job description

**TITLE**: Security Operations Engineer II**WHAT YOU’LL DO:**The Security Operations Engineer II is a senior team member in the Security Operations function within Duck Creek’s Information Security team. This role is responsible for analyzing, designing, implementing, monitoring, and evaluating the security systems that protect Duck Creek’s computer systems and data. The engineer will support Duck Creek’s information security operations, assisting in the implementation of best-in-class controls and processes for both internal and external security. The role requires staying up-to-date with the latest cybersecurity intelligence, including evolving hacker methodologies, in order to anticipate and address potential security breaches, threats, or cyber-attacks. * Support Duck Creek’s information security operations, assisting in the implementation and operation of robust controls and processes for both internal and external security requirements.* Leverage standard security frameworks and manage the ongoing operations of the information security management system.* Participate in the design and implementation of server, appliance, desktop, laptop, and mobile device security configurations to protect systems from compromise.* Contribute to the implementation of network firewall, intrusion detection/prevention, data loss prevention, and network access control solutions for network protection.* Provide Tier 2 support for secure remote access solutions for employees, third parties, and clients.* Provide Tier 2 support for cryptographic controls to protect data at rest and in motion, including systems, databases, and data connections between systems and applications.* Collaborate with relevant business entities to establish and support Secure Development Lifecycle processes for Duck Creek applications, including managing tools and resources for vulnerability and security code inspections.* Support disaster recovery planning and implementation to meet business continuity needs for both internal and external systems and services.* Assist in monitoring systems by acquiring and correlating logs to focus on security events and provide alerts for potential security incidents.* Contribute to the development and maintenance of information security policies that align with Duck Creek's business model, industry standards, and regulatory requirements, including managing policy exception processes.* Act as a subject matter expert during the technology risk assessment process to ensure alignment with the organization's risk tolerance and risk profile.* Support the development and execution of employee security training programs, educating employees on policies, standards, processes, and emerging security threats.* Assist in business continuity and disaster recovery testing efforts across the organization.* Ensure compliance with regulatory requirements and assist in delivering metrics and reports as required by the CISO and other stakeholders.* Support penetration testing programs to simulate attacks against systems and services and provide actionable insights for improving security.* Provide Tier 2 support for the Security Operations Center (SOC) to collect, analyze, and respond to security incidents, including forensics, post-mortem analysis, and reporting.* Provide support for network security architecture, including firewalls, intrusion detection/prevention, content filtering, and network access control.* Integrate advanced threat detection, threat intelligence, and security automation into the security control environment, ensuring timely incident classification, escalation, and response. **WHAT YOU’VE DONE:**REQUIRED:* Bachelor's degree in Information Security, Computer Science, or a related field, or equivalent experience.* 5+ years of applicable experience in cybersecurity or related domains.* CISSP certification or equivalent.* Proven experience in security operations, incident response, and threat management.* Demonstrated experience in utilizing security frameworks, tools, and technologies to protect organizational assets.* Strong experience with cryptography, network security, and security monitoring tools (e.g., SIEM, IDS/IPS).* Ability to analyze and resolve complex security incidents and vulnerabilities.Experience in risk assessments and compliance with industry regulations. PREFERRED:* Advanced degree in Information Security, Computer Science, or a related field.* 8+ years of experience in cybersecurity or related roles.* Experience with security automation, advanced threat analysis, and incident response planning.* Experience working in a global software company or similar large-scale enterprise environment.* Familiarity with regulatory compliance requirements, including GDPR, HIPAA, and others.Experience in mentoring or providing guidance to junior team members. **Knowledge, Skills, Abilities & Behaviors:*** Advanced knowledge of information security principles, threats, and risks.* Proficient in managing and utilizing various information security frameworks and tools.* In-depth understanding of cryptography, network security, and threat intelligence.* Experience with security monitoring tools, such as SIEM, IDS/IPS, and DLP.* Ability to analyze complex technical issues and develop innovative solutions.* Exceptional time and priority management skills to balance business objectives with security requirements.* Strong project management skills with the ability to handle multiple large projects, ensuring they stay within scope, on time, and on budget.* Ability to work independently with minimal direction and provide strategic input on complex security issues.* Strong communication skills to present technical issues effectively to various audiences.* Expertise in continuous improvement practices and adopting industry-recognized best practices.* Knowledge of compliance requirements and industry standards such as GDPR, HIPAA, and others.* Ability to mentor and guide less experienced team members and continuously grow knowledge in the information security domain.* Strong analytical skills with the ability to assess and resolve complex security problems.* Ability to collaborate with cross-functional teams and influence security decisions across the organization.* Comfortable working under pressure and handling multiple priorities simultaneously . **Work Environment & Other Requirements:*** Travel: 0-10%* Special Hours:* Work Authorization: Must be legally authorized to work in the country of the job location **WHAT WE STAND FOR:**Our global company celebrates & leverages the differences each employee brings to the table. Our success is a direct result of an inclusive culture where opportunities to learn from one another occur regardless of title, seniority, or background. This collaborative and team-oriented approach is at the core of how we operate and continuously improve our products, services, and systems. As such, Duck Creek is committed to providing equal opportunity to all employees and applicants – to recruit, hire, train, and reward employees for their individual abilities, achievements, and experience without regard to race, color, gender, religion, sexual orientation, age, national origin, disability, marital, military, or any other protected status.We strive to be an example to the world of inclusion, diversity, and equity in all things – where employees are free to be their authentic selves in the workplace and in the communities in which we live. We believe in leading by example and are proud of the diversity of our team and our shared commitment to our Core Values: We Prioritize Respect; We Listen; We Care; We Add Value; and We Lead.To learn more about our inclusive company culture, values, DE&I initiatives, and people, please visit: https://www.duckcreek.com/life-at-duck-creek/.Please let us know if you encounter accessibility barriers with our web content by sending an email to [e-mail].**Privacy Notice:** By submitting your application, you acknowledge that Duck Creek Technologies may collect and process your personal data for recruitment purposes in accordance with our Privacy Notice and applicable data protection laws.**Duck Creek Technologies does not accept, nor will we pay a fee for any hires resulting from unsolicited headhunter or agency resumes.** Actual compensation for this role is determined based on a variety of factors, including job-related skills, experience, qualifications, internal equity, and geographic location, where permitted by law.For reference, the expected salary range for this position is generally positioned as follows based on candidate location:* 130,600 – 186,500: Candidates living in the Boston, New York City–Newark, Los Angeles, San Francisco/Bay Area, Seattle, or Washington, DC metropolitan areas* 124,600 – 178,100: Candidates living in Chicago, Dallas–Fort Worth, Houston, Minneapolis, or Philadelphia metropolitan areas, or in Colorado, Connecticut, Maryland, Rhode Island, or Vermont* 118,700 – 169,600: Candidates living in Georgia, Michigan, North Carolina, New Hampshire, Oregon, or Wisconsin* 106,800 – 161,100: For all other U.S. locationsThis position is also eligible for annual bonus compensation, subject to plan terms and individual eligibility.Final compensation will be determined based on the factors outlined above and in accordance with applicable law.Duck Creek Technologies believes in the safe, ethical, and responsible use of artificial intelligence. We may use AI-assisted tools to support parts of the recruitment process, such as reviewing applications, identifying relevant skills, and organizing candidate information.AI tools are used to assist—not replace—human judgment. All AI-assisted outputs are reviewed by a Duck Creek team member, and final hiring decisions are always made by people. Candidates should be comfortable working in environments where AI is used responsibly to enhance business processes.Duck Creek Technologies offers a comprehensive benefits package, which includes:* Flexible work environment* Medical, dental, vision, life, and disability insurance* 401(k) retirement plan with match (6% employer match up to $12,000 annually)* Flexible Spending Accounts (FSA) and Health Savings Accounts (HSA)* Paid holidays, vacation, and volunteer time* Employee Assistance Program (EAP)Benefits eligibility and offerings may vary based on role and location.The application window for this position will remain open until the role is filled or a sufficient number of qualified candidates have been identified.