Engineering, Application Security Engineer II
Location – Irvine, CA

Company Overview
Hyundai AutoEver America (HAEA), the dynamic IT powerhouse behind Hyundai Motor Corporation, a Fortune 500 global leader in the automotive industry. As a key affiliate, we provide cutting-edge IT services and support to top brands including Kia, Genesis, Hyundai Translead, Hyundai Mobis, Hyundai Capital, and Glovis.

HAEA offers a truly global and collaborative environment. Here, you’ll drive innovation, boost operational efficiency, and help shape the future of mobility for the Hyundai Motor Group.
At HAEA, we understand that IT is the cornerstone of today’s fast-evolving digital world. By uniting all IT resources under one roof, we deliver consistent, top-quality solutions while serving as the crucial information link between Hyundai’s Global Headquarters and North American operations.

If you’re passionate about technology and eager to make a real impact at a world-class company, Hyundai AutoEver America is the place to grow your career. Join us and be part of the transformation that’s driving the future of automotive innovation.

What You Will Be Doing
The Application Security Engineer II is responsible for supporting and maintaining the organization’s Cloud Security Standard across all cloud service providers, ensuring consistent implementation, operational effectiveness, and lifecycle management. This role sits within the Security Architecture and Engineering organization and focuses on strengthening cloud security posture through standards governance, logging and monitoring integration, and hands-on management of Cloud Security Posture Management (CSPM) capabilities.

The role requires practical experience working across AWS, Azure, and GCP environments, with a strong emphasis on ensuring cloud-native and third-party logging is consistently integrated into centralized log management and SIEM platforms to support security monitoring, detection, and incident response. The key responsibilities of this role are as described below:

Cloud Security Standards & Governance

Supporting the Cloud Security Architect, maintain and support the Cloud Security Standard across all iterations and lifecycle phases, ensuring it remains current, actionable, and aligned with:
- Cloud provider capabilities (AWS, Azure, GCP)
- Organizational security requirements
- Industry best practices and threat landscape changes
Partner with other teams to ensure standards are:
- Technically feasible
- Consistently implemented
- Clearly documented and communicated
Support reviews and updates to the standard as cloud services, architectures, and risks evolve.

Cloud Logging, Monitoring & SIEM Integration

Ensure cloud logging is consistently enabled, configured, and maintained across AWS, Azure, and GCP environments.
Work with Security Operations and Platform teams to ensure logs are:
- Reliably ingested into centralized log management and SIEM platforms
- Structured and normalized to support detection, investigation, and audit needs
Validate coverage for critical log sources, including:
- Identity and access activity
- Network and perimeter events
- Resource configuration and management activity
Support troubleshooting of log gaps, ingestion failures, and data quality issues.

Cloud Security Posture Management (CSPM)

Operate and maintain CSPM capabilities across AWS, Azure, and GCP environments.
Monitor CSPM findings to identify:
- Misconfigurations
- Policy violations
- Security control gaps
Partner with engineering teams to drive remediation of CSPM findings, ensuring:
- Clear ownership
- Risk-based prioritization
- Sustainable fixes
Support tuning of CSPM policies and rules to reduce noise and improve signal quality.
Collaborate with the Risk Operations team to ensure CSPM findings that are not automatically remediated are tracked as Risk Issues.

Security Operations & Risk Enablement

Collaborate with Cyber Defense, Incident Response, and the Integrated Risk Management team to ensure cloud security controls support operational and risk objectives.
Provide input into cloud-related risk assessments, audits, and security reviews.
Assist with security investigations and incident response activities involving cloud environments.

Basic Qualifications:

Bachelor’s degree in Cybersecurity, Information Technology, Computer science or a related field or equivalent experience AND
5+ years of experience in Cloud Security, Cloud Engineering, or Security Engineering.
Practical experience working with AWS, Azure, and GCP in production environments.
Demonstrated experience ensuring cloud logging feeds into centralized log management and SIEM platforms.
Hands-on experience managing Cloud Security Posture Management (CSPM) tools across multi-cloud environments.
Technical Expertise: Working knowledge of Cloud identity and access management, Cloud-native logging and monitoring services, and Common cloud security misconfigurations and threats. Strong troubleshooting and collaboration skills.

Preferred Qualifications:

Master's degree in Cybersecurity, Information Technology, Computer science or a related field or equivalent experience AND
5+ years of experience in Cloud Security, Cloud Engineering, or Security Engineering.
Hands on experience with CSPM tools such as Prisma Cloud, Wiz, Lacework or similar. A working understanding of cloud security frameworks and benchmarks (e.g. CIS).
Experience supporting audits or compliance activities related to cloud security.

Industry-recognized credentials such as CISSP, CISM, or cloud specific certifications for AWS, Azure or GCP security are highly desirable.

Team Culture:
The team fosters a high-performance, collaborative environment centered around proactive technology risk management and excellent customer service. Members are expected to lead with accountability, communicate effectively across functions, and adapt to dynamic challenges. The culture values technical excellence, continuous improvement, and global coordination, ensuring technology risks are well managed.

Base Salary Range: $96,550 - $138,061

Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws. Our Company adheres to the equal employment opportunity guidelines set forth by federal, state and local laws. The information requested on this form is sought in good faith and will not be used to discriminate against the applicant based on race, religion or creed, color, national origin, ancestry, physical disability, mental disability, medical condition, genetic characteristics, marital status, sex or gender (which includes pregnancy, childbirth, or related circumstances), gender identity, gender expression, age, citizenship, sexual orientation, family care or medical leave status, military and veteran status, political affiliation, or any other characteristic protected by federal, state and local laws.

10872 - Application Security Engineer II