Senior Infrastructure Security Engineer

This is a fully remote position, open to applicants in Missouri.

📋 Description

• Manage and enhance Centene’s Attack Surface Management and Breach Attack Simulation initiatives across hybrid, cloud, on-premises, and enterprise environments.

• Validate assets that are accessible via the internet and confirm ownership of these assets.

• Evaluate security coverage and ensure the accuracy of the asset inventory.

• Coordinate activities related to remediation.

• Conduct breach attack simulation exercises and assess the effectiveness of controls.

• Generate actionable security reports.

• Collaborate with security, infrastructure, cloud, application, risk, compliance, and business teams.

• Establish and uphold application security standards in line with industry best practices.

• Examine application security architecture to pinpoint deficiencies and suggest enhancements.

• Audit configurations related to application security and operations.

• Monitor and address application security alerts and vulnerabilities, including malware, injection attacks, and unauthorized access.

• Develop application security documentation and standard operating procedures.

• Present findings and ensure they are tracked to resolution with relevant parties.

• Automate routine application security tasks and create self-service options.

• Implement authentication, authorization, encryption, logging, and application security testing throughout the Software Development Lifecycle (SSDLC).

• Review application security configurations and provide recommendations.

• Adhere to all policies and standards while fulfilling additional assigned duties.

⛳️ Requirements

• Must possess authorization to work in the U.S. without the need for employment-based visa sponsorship, now or in the future.

• Bachelor’s degree in a quantitative or business discipline such as statistics, mathematics, engineering, or computer science.

• 4–6 years of relevant experience.

• Equivalent experience may be accepted in lieu of the specified education/experience based on applicable knowledge, responsibilities, scope, and skills.

• Familiarity with Attack Surface Management tools, including Tenable and Wiz.

• Experience with Breach Attack Simulation, including Wiz and other BAS simulation platforms and control validation tools.

• Proficient in using Armis Centrix, Armis VIPR, Tenable, and Wiz for asset visibility and vulnerability management.

• Experience with ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools.

• Background in external asset discovery, adversary emulation, control validation, improving security detection, managing asset inventory, vulnerability management, coordinating remediation, developing security reports, metrics development, process documentation, and cross-functional program coordination.

• CompTIA Security+ Certification is preferred.

• Intermediate skills in analytical thinking, project management, judgment, decision-making, and independent work.

🏝️ Benefits

• Competitive salary.

• Health insurance coverage.

• 401K retirement plan.

• Stock purchase plans.

• Tuition reimbursement program.

• Paid time off along with holidays.

• Flexible work arrangements, including remote, hybrid, field, or office schedules.

• Additional incentive forms may be included in total compensation.

• Equal opportunity employer dedicated to promoting diversity.