Security Engineer II – Security Operations

Overview

AvidXchange is seeking a driven and detail-oriented Security Engineer II to join our Technology and Security organization, with a primary focus on Security Operations, detection engineering, and incident response. In this role, you will enhance and operate the security controls, automations, and monitoring capabilities that protect our systems, data, and infrastructure. You’ll collaborate closely with Security Engineering, Architecture, Technology Operations, and Software Engineering to strengthen our detection posture, streamline response workflows, and continuously improve our SIEM/SOAR ecosystem.

This position is ideal for someone who thrives in fast paced environments, enjoys solving complex security problems, and is passionate about building scalable, automated, and resilient detection and response capabilities.

What You’ll Do

• Develop, tune, and maintain SIEM detections, SOAR automations, processes, and playbooks to improve detection accuracy and response efficiency.

• Monitor, analyze, and triage security alerts, logs, and telemetry to identify threats, suspicious activity, and opportunities for improved visibility.

• Partner with diverse teams to support incident response, including investigation, containment, remediation, and post incident reviews.

• Continuously refine alerting logic to reduce false positives and enhance signal to noise ratio across security tools and platforms.

• Collaborate with engineering and operations teams to ensure logging, monitoring, and security controls are properly implemented and aligned with best practices.

• Evaluate and optimize security technologies to improve automation, detection coverage, and operational efficiency.

• Contribute to threat modeling and detection engineering efforts by researching emerging threats, attacker techniques, and relevant security trends.

• Assist with compliance, audit, and risk assessment activities by providing evidence, documentation, and remediation guidance.

• Maintain and update security documentation, including operational procedures, architecture diagrams, and response playbooks.

• Participate in the on-call rotation to provide timely incident response, including triage, investigation, containment, and escalation of security events, while ensuring clear communication and thorough documentation throughout the response lifecycle.

What We’re Looking For

• 3+ years of experience in security operations, detection engineering, cybersecurity engineering, or a related technical discipline.

• Hands‑on experience with SIEM/SOAR platforms, including alert creation, tuning, automation workflows, and log onboarding.

• Strong understanding of security monitoring concepts, attacker TTPs, and frameworks such as MITRE ATT&CK.

• Experience with cloud environments (Azure, AWS, or GCP) and cloud native logging, monitoring, and security controls.

• Proficiency with scripting or programming languages (YARA-L, Python, PowerShell, etc.) for automation, data analysis, and tool integration.

• Familiarity with incident response processes, vulnerability management, and security architecture fundamentals.

• Strong communication and collaboration skills, with the ability to work effectively across technical and business teams.

• Security certifications such as CySA+, GSEC, GCIA, GMON, CEH, CCSP, or CISSP are strongly preferred.

• Experience working in agile, DevSecOps, or high-velocity operational environments.

• A proactive, analytical mindset with the ability to identify gaps, propose improvements, and drive operational excellence.

 

 

About AvidXchange

AvidXchange is a leading provider of accounts payable (“AP”) automation software and payment solutions for middle-market businesses and their suppliers. By trade, we are a technology company, but if you ask anyone who works here, they’ll tell you our people are at the core of who we are. We focus on creating a culture of Diversity, Inclusion & Belonging, and are proud to be a safe place where teammates can bring their whole selves to work. At AvidXchange, mindset is everything. We are Connected as People, Growth Minded, and Customer Obsessed. These three mindsets represent our culture – who we are, who we’ve always been, and they guide us to improve every day. Since our founding in 2000 in Charlotte, NC, we’ve created a company of over 1,600 teammates worki