Security Engineer II

About the Role Akuna is seeking a driven Security Engineer II to safeguard our systems, data, and assets against an evolving threat landscape shaped by AI. In this role, you will proactively identify vulnerabilities, hunt for threats, automate security workflows, and drive incident response while securing the firm's expanding AI ecosystem. You will contribute to prevention, detection, investigation, response, and recovery across the organization.

What You'll Do

• Perform analysis of security incidents and threat actors utilizing the MITRE ATT&CK framework to enhance detection capabilities
• Investigate and respond to security incidents reported by the Managed Security Service Provider (MSSP), security controls, and end users, while developing effective triage processes to ensure prompt and thorough incident handling
• Assist in managing enterprise security infrastructure, including Intrusion Detection/Prevention Systems, SIEM, EDR, Web Filtering, MFA, and Email Security
• Develop threat hunting activities by analyzing anomalous log data, intelligence, and conducting brainstorming sessions to detect and eliminate potential adversaries in our network
• Leverage APIs across enterprise technology, SaaS/IaaS/PaaS and business applications to create new sources of telemetry signals for threat Detection and Response
• Engineer orchestration and automation to streamline the incident analysis and response process
• Engineer war-gaming and tabletop activities as part of red/blue team exercises to strengthen and test incident response playbooks, evaluating and improving the firm's incident response capabilities
• Conduct vulnerability management assessments, recommend remediation actions, and collaborate with system owners to ensure timely patching
• Collaborate with Managed Security Service Provider (MSSP) to implement threat detection rules and event correlation using SIEM platforms to identify malicious, suspicious, and anomalous activities
• Collaborate with different departments within the firm to identify security monitoring blind spots and opportunities for threat detection
• Provide support in implementing and maintaining the information security infrastructure ensuring its effective operation and ongoing maintenance
• Educate users on security best practices and implement initiatives to promote cybersecurity awareness and risk reduction, including conducting training sessions and developing user-friendly documentation

What We're Looking For

• 3-5 years of experience in cybersecurity, security engineering, or cyber defense with a demonstrated ability to protect enterprise systems, infrastructure, and data
• Passion for cybersecurity and a strong understanding of security operations, threat detection, incident response, and enterprise security principles
• Experience administering and supporting enterprise security technologies such as SIEM, EDR, firewalls, IDS/IPS, vulnerability management platforms, identity and access management (Active Directory, Entra ID/Azure AD, SSO, MFA), and Microsoft 365 security
• Experience investigating security events through log analysis, identifying indicators of compromise, and assisting with incident investigation and response
• Understanding of vulnerability management processes, including vulnerability identification, prioritization, remediation, and validation
• Experience securing cloud environments and SaaS platforms, with familiarity in Azure, AWS, or GCP security concepts and cloud-native security controls
• Working knowledge of Windows, Linux, and macOS operating systems from a security perspective
• Experience writing PowerShell, Python, or similar scripts to automate repetitive tasks or improve security operations
• Strong understanding of networking fundamentals, including TCP/IP, DNS, HTTP/S, VPNs, and common enterprise network security concepts
• Experience implementing or supporting endpoint protection technologies such as EDR, Next-Generation Antivirus, or endpoint security platforms
• Excellent communication skills with the ability to collaborate across technical and business teams and explain security concepts to both technical and non-technical audiences
• Strong documentation skills with the ability to create and maintain technical procedures, standards, and operational documentation

Nice to Have

• Experience with security orchestration and automation (SOAR) platforms such as Cortex XSOAR, Splunk SOAR (Phantom), Tines, or Torq.
• Familiarity with Microsoft Defender XDR, Microsoft Sentinel, CrowdStrike, SentinelOne, or similar enterprise EDR security platforms.
• Knowledge of regulatory and security frameworks such as NIST Cybersecurity Framework, CIS Controls, MITRE ATT&CK, or ISO 27001.
• Experience with Data Loss Prevention (DLP), CASB, email security, or Zero Trust architectures.
• AI & Emerging Technologies experience (desirable)

Compensation & Benefits