Sr. Security Engineer, Vulnerability Management

Highmark Health is seeking a highly experienced and technically adept Cybersecurity Engineer with a deep specialization in Vulnerability Management and Secure Configuration Management. This pivotal role is responsible for the strategic development, implementation, and continuous enhancement of enterprise-wide security controls and practices that proactively defend against evolving threats and meet critical business and regulatory obligations.

Responsibilities:

• Lead teams in clearly defining requirements, deliverables and timeframes. Escalate issues and make recommendations to resolve them to the appropriate audience
• Conduct root cause analysis to identify and resolve complex problems impacting ISRM Infrastructure
• Develop and/or deliver technical training in complex technical areas. Mentor less senior staff in the execution of their duties
• Complete project tasks to enable the on time, within budget and scope delivery of ISRM Infrastructure projects
• Implement, monitor, configure, and maintain security systems
• Assure compliance to required standards, procedures, guidelines and processes
• Other duties as assigned or requested

Requirements:

• U.S. Citizen (due to contractual/access requirements)
• Bachelor's Degree in Computer Science, Information Systems, or closely related field
• 7 years with Information Security and Systems Analysis
• 7 years with Information Security and/or Information Risk Management and/or Information Technology
• 7 years with Operating Systems and Software Administration
• 7 years developing, communicating and presenting Information Security and Risk Management concepts to varying audiences
• 7 years with technologies such as Intrusion Prevention Systems (IPS), firewalls, endpoint protection, web/email filtering, Data Loss Prevention (DLP), digital rights management, encryption, Security Event and Incident Management (SEIM), and virtualization platforms
• Strong scripting skills
• Experience with system integrations
• Master's Degree in Computer Science, Information Security or related field
• 10 years of experience in Information Security
• 5+ years of experience in Vulnerability and Secure Configuration Management engineering, including design, architecture, complex deployments and configuration, API integrations, high availability concepts, vendor communication
• 3+ years of experience in adjacent Security domains, such as Threat Intel, Application Security, Offensive Security (Penetration Testing, Red/Purple Teaming)
• Outstanding technical acumen across a broad range of cloud and on-premise technologies, architectures, applications and APIs
• Outstanding verbal, written, presentation, facilitation, and interaction skills, including ability to effectively communicate technical issues and engineering concepts to technical and non-technical people
• Demonstrated ability to initiate and guide enterprise technical products and services business cases to successful outcomes at scale
• Demonstrated ability to navigate technical details for enterprise security services, and guide through solution development
• Certified Information Security Professional (CISSP)
• Security +