Security Engineer II Cloud Security & GRC

Overview of Security Engineer II Cloud Security & GRC

Join ShipBob as a Security Engineer II Cloud Security & GRC. You will design, implement, and maintain cloud-native security solutions, participate in risk assessments, and collaborate across teams to secure critical data and systems.

What You’ll Do

• Design and implement threat detection, response, and access control solutions.
• Develop and automate security workflows, playbooks, and tools.
• Create, enforce, and update security policies and standards (ISO 27001, SOC 2, PCI, NIST CSF, SOX).
• Participate in risk assessments, compliance audits and maintain GRC platforms.
• Conduct third-party risk reviews and manage vendor responses.
• Run threat hunting campaigns and guide incident response processes.
• Collaborate with security, development and operations teams.
• Participate in security awareness and customer questionnaires.
• Identify process improvements and provide actionable guidance.

What You’ll Bring To The Table

• 4+ years in security architecture and engineering.
• Experience in incident response, threat intelligence, and access control.
• Proficiency in scripting (Python, PowerShell, Go, Bash) and cloud security.
• Deep knowledge of frameworks such as MITRE ATT&CK, ISO 27001, SOC 2, NIST CSF, PCI, SOX, GDPR.
• Experience with GRC tools and risk management projects.
• Professional certifications like Security+, CISSP, CISA, CISM, CRISC, etc. are preferred.

Perks & Benefits

Enjoy comprehensive insurance, casual leave benefits, maternity & paternity leave, quarterly wellness day, work from home allowance, and more.

Key skills/competency

• Cloud Security
• GRC
• Risk Assessment
• Threat Detection
• Incident Response
• Automation
• Access Control
• Compliance
• Security Architecture
• Scripting