Senior Infrastructure Security Engineer

This is a fully remote position, open to applicants in California, +3 more states.

📋 Description

• Operate and enhance Centene’s Attack Surface Management and Breach Attack Simulation programs across hybrid, cloud, on-premises, and enterprise environments.

• Validate internet-facing assets, confirm ownership, assess security coverage, and ensure inventory accuracy.

• Coordinate remediation efforts and conduct breach attack simulation exercises.

• Validate the effectiveness of controls and generate actionable reports.

• Collaborate with security, infrastructure, cloud, application, risk, compliance, and business teams.

• Implement and uphold application security standards aligned with industry best practices.

• Analyze application security architecture to identify deficiencies and suggest enhancements.

• Conduct audits of application security and operational configurations.

• Monitor and remediate application security alerts and vulnerabilities.

• Develop application security documentation and standard operating procedures, report findings, and ensure they are tracked to resolution.

• Automate routine application security operational tasks and design self-service options.

• Implement authentication, authorization, encryption, logging, and application security testing throughout the Software Development Life Cycle (SDLC).

• Review application security configurations and provide recommendations.

• Adhere to all policies and standards.

• Perform additional duties as assigned.

⛳️ Requirements

• Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future.

• Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) OR equivalent experience gained through applicable knowledge, duties, and skills reflective of this position's level.

• Requires 4–6 years of relevant experience.

• Familiarity with Attack Surface Management, including Tenable and Wiz.

• Experience with Breach Attack Simulation, Wiz, and other BAS simulation platforms and control validation tools.

• Proficient with Armis Centrix, Armis VIPR, Tenable, and Wiz for asset visibility and vulnerability management.

• Knowledge of ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools.

• Experience in Attack Surface Management and external asset discovery.

• Background in Breach Attack Simulation, adversary emulation, control validation, and enhancing security detection.

• Experience in asset inventory management, ownership validation, and security coverage assessment.

• Involvement in vulnerability management, remediation coordination, and ServiceNow workflow support.

• Experience in security reporting, metrics development, process documentation, and cross-functional program coordination.

• CompTIA Security+ Certification is preferred.

🏝️ Benefits

• Competitive pay.

• Health insurance.

• 401K.

• Stock purchase plans.

• Tuition reimbursement.

• Paid time off plus holidays.

• Flexible work arrangements with options for remote, hybrid, field, or office schedules.

• Additional forms of incentives may be included in total compensation.