Senior Cyber Security Engineer

Summary

Join Wellmark as a Security Professional to lead the design and implementation of advanced security protocols, safeguarding sensitive data and critical systems. You will collaborate with cross-functional teams, enforcing enterprise-wide security standards and protecting member information while ensuring compliance. This role requires a minimum of 7 years of IT experience, with at least 5 years focused on IT security. You will need expertise in various security domains, compliance frameworks, and technologies. The position offers the flexibility of remote work and the opportunity to contribute to a leading health insurance provider's security posture. You will be responsible for investigating and responding to security events, collaborating with stakeholders, and developing security awareness materials.

Requirements

• Bachelor's degree or direct and applicable work experience
• Minimum of 7 years of experience working with a variety of technologies within an IT environment. At least 5 years of experience should be within a role where IT security was a primary responsibility
• Experience designing and configuring solutions in multiple security domains
• Understanding of the OWASP, the MITRE ATT&CK framework, the Cyber Kill Chain, and the software development lifecycle (SDLC)
• Strong Windows and *nix support skills, network and cyber security knowledge
• Extensive knowledge of security technologies, compliance frameworks, and industry best practices
• Experience configuring SIEM systems, threat intelligence platforms, SOAR, IDS/IPS, DLP and other networking and system monitoring tools
• Experience configuring solutions within a cloud platform (e.g., AWS, Azure, GCP)
• Experience in scripting languages such as Python, PowerShell, or Bash
• Excellent communication skills, both written and verbal, with the ability to explain complex technical issues to non-technical stakeholders
• Strong organization skills with the ability to manage multiple tasks simultaneously
• Ability to work independently and as part of a team in a fast-paced environment
• Strong attention to detail with the ability to accomplish tasks and processes accurately and completely
• Ability to generate innovative solutions attempting different and novel ways to address problems and opportunities
• Proven experience in troubleshooting and performing root cause analysis with the ability to obtain relevant information, identify essential elements, and examine issues or inconsistencies

Responsibilities

• Lead the design and implementation of advanced security protocols and work closely with cross-functional teams to uphold and enforce enterprise-wide security standards
• Play a key role in protecting member information and ensuring compliance with industry regulations in an ever-evolving threat landscape
• Review escalations from junior team members and respond to security events
• Serve as an active member of the Cyber Security Incident Response Team (C-SIRT). Drive the investigation and response to security events and incidents, researching for indicators of compromise, potential data loss, or other abnormal activity. Conduct root cause analysis and implement corrective actions. Provide artifacts where applicable. Complete and maintain documentation throughout the investigation for analysis and reporting
• Guide junior team members on course of action and direction
• Build and configure infrastructure for vulnerability scanning
• Monitor for known exploited vulnerabilities within applications, endpoints, databases, networking, mobile, and cloud services
• Prioritize vulnerability remediation based on criticality, exploitation probability, rating, and business risk exposure
• Collaborate with technical stakeholders to assess and remediate escalated vulnerabilities
• Build and configure infrastructure for host and application hardening scans. Perform scans and recommend remediations. Collaborate with stakeholders to remediate findings. Validate remediations
• Collaborate with stakeholders on the design and rule configuration for network application firewalls, network IPS/IDS, and web application firewalls. Provide technical support and troubleshooting
• Review application scans and determine criticality of findings. Work with application teams to discuss findings and remediation steps
• Design and plan security exercises for team members and guest stakeholders. Responsibly build and oversee the creation of attacks and implement solutions for them to be safely introduced into the environment
• Define key performance indicators and metrics. Gather data to create reporting dashboards. Communicate risks with stakeholders and leadership
• Gather artifacts for audit and compliance reviews. Compile artifacts from junior team members for review. Participate in internal and external audit reviews
• Develop and deliver security awareness materials to educate the workforce about cyber security best practices and the importance of protecting sensitive information. Plan events and coordinate with business stakeholders for execution. Review materials for publication
• Participate in technical and non-technical projects requiring information security oversight to ensure policies, procedures, and standards are met
• Maintain current knowledge of the IT and Cyber Security industry including awareness of new or revised solutions, improved processes, and the development of new attacks and threat vectors
• Advise on best practices and secure implementations for new or existing infrastructure, tools, etc. Recommend new security solutions as well as effective improvements to the existing security controls that do not negatively impact business innovation
• Serve as a liaison for the security team collaborating with business and technical stakeholders
• Perform ad-hoc penetration tests on Wellmark systems and applications and report found issues to leadership
• Other duties as assigned

Preferred Qualifications

Recognized security certifications (e.g., CISSP, OSCP)

Benefits

You will have the flexibility to work where you are most productive. This position is eligible to work fully remote