New

Information Security Engineer II - Automation

Mass General Brigham (Enterprise Services)
United States, Massachusetts, Somerville
399 Revolution Drive (Show on map)
Jul 23, 2025
Summary The Information Security Engineer II tackles moderately complex security engineering challenges within their domain. They maintain and enhance existing security controls while actively participating in the design and development of new solutions. They proactively identify and address vulnerabilities or deficiencies within their domain, develop and implement robust controls to mitigate these risks, create detailed documentation, and implement mechanisms to ensure the effectiveness of solutions. The Information Security Engineer II is expected to work independently on moderately complex problems within their domain and provide guidance to junior team members to support their development. They will regularly engage with external stakeholders and partners to support the development of effective solutions. Essential Functions -Takes ownership of specific modules or components within projects or tools, from design to implementation. -Reviews and provides constructive feedback on build/code contributions from team members. -Participates in architectural discussions and contributes to the design of complex solutions. -Proactively identifies and optimizes improvement in existing processes. -Mentors junior team members, sharing knowledge and best practices. -Cross-Functional collaboration with other teams to ensure successful solution delivery. Education Associate's Degree Related Field of Study required or Bachelor's Degree Related Field of Study required Can this role accept experience in lieu of a degree? Yes Experience -Relevant experience 3-5 years required -Bachelor's or Associate's degree, or equivalent work experience. -3+ years of experience in cybersecurity, with direct experience in scripting and automation. -Strong experience with scripting and programming languages, including: Python, PowerShell, Bash, JavaScript, or Go. -Familiarity with key security platforms and tools (e.g., Splunk, CrowdStrike, etc). -Hands-on experience working with: APIs, webhooks, and integration frameworks. -Security automation frameworks and platforms (e.g., SOAR, SIEM, EDR tools). -Security certifications are a plus (e.g., GSEC, Security+, CISSP, GIAC, etc.). Knowledge, Skills and Abilities - Strong understanding of cybersecurity concepts within their domain. - High proficiency with the tools and solutions supported by the team. - Solid understanding of system architecture and design. - Strong problem solving skills and analytical thinking to identify solutions to complex problems, and to optimize existing solutions. - Excellent prioritization capabilities, with an aptitude for breaking down work into manageable parts, effectively assessing the priority and time required to complete each part. - Excellent communication and teamwork skills to share knowledge, present ideas, and lead discussions. -M-F Eastern Business Hours required -Hybrid onsite Flexible working model required weekly includes onsite in office (number of days weekly can vary, must be flexible for business needs) -1-3 onsite days per week -Remote working days require stable, secure, quiet, compliant working station Mass General Brigham Incorporated is an Equal Opportunity Employer. By embracing diverse skills, perspectives and ideas, we choose to lead. All qualified applicants will receive consideration for employment without regard to race, color, religious creed, national origin, sex, age, gender identity, disability, sexual orientation, military service, genetic information, and/or other status protected under law. We will ensure that all individuals with a disability are provided a reasonable accommodation to participate in the job application or interview process, to perform essential job functions, and to receive other benefits and privileges of employment.