Staff Information Security Engineer – IntelliScript

This is a fully remote position, open to applicants in Wisconsin.

📋 Description

• Oversee and enhance Identity Access Management programs.

• Develop, monitor, and sustain the Information Security Program.

• Implement security initiatives pertaining to infrastructure, products, and data.

• Contribute to strategic security planning while providing recommendations and enhancements.

• Collaborate with application developers to bolster product feature security.

• Design and execute security controls and measures to safeguard applications and data.

• Monitor and analyze security events and incidents, responding to security breaches.

• Incorporate security best practices across the software development lifecycle.

• Identify and prioritize security vulnerabilities, developing strategies for mitigation.

• Prepare and educate developers, enhancing organizational security awareness.

• Proactively address incoming security threats.

• Evaluate, address, and report on threat and preparedness levels.

• Assist in ensuring compliance with relevant industry standards.

• Work alongside Platform Engineering and Software Development teams on security initiatives.

• Enhance and maintain security infrastructure and processes for secure products and environments.

• Lead initiatives focused on problem-solving and organizational risk management.

⛳️ Requirements

• Minimum of 10 years of relevant experience.

• At least 5 years of experience in Identity Access Management.

• 5+ years of hands-on technical engineering experience.

• Familiarity with modern IAM platforms such as Okta, AWS, Azure AD/Entra ID, Auth0, and/or Ping Identity.

• Strong knowledge of OAuth, SAML, OIDC, and LDAP.

• Experience in configuring IAM solutions for API, web, and web authentication scenarios.

• Proven experience in building, supporting, and securing cloud-based web infrastructure using AWS.

• In-depth understanding of cryptography, authentication, authorization, secrets management, data security, web technology stack, and cloud security.

• DevSecOps experience with Git, Docker, Windows, SIEM, AWS Security products, and Terraform.

• Knowledge of web application security best practices.

• Experience with secure coding practices and security frameworks like OWASP, NIST, and CIS.

• Ability to identify and mitigate security threats.

• Working knowledge of software engineering and deployments, including CI/CD pipelines and SCM.

• Capability to conduct application security assessments.

• Willingness to travel for the annual All Team Meeting and occasionally for other meetings.

• Continued education and/or advanced degrees, industry certifications, and experience in HITRUST/HIPAA/PCI-regulated environments, SaaS, actuarial science, and/or the insurance industry are considered desirable qualifications.

🏝️ Benefits

• Comprehensive Medical, Dental, and Vision coverage for employees, dependents, and domestic partners.

• Access to an Employee Assistance Program (EAP).

• 401(k) Plan featuring a company matching program and profit-sharing contributions.

• Participation in a Discretionary Bonus Program.

• Availability of Flexible Spending Accounts (FSA).

• Generous Paid Time Off (PTO): full-time employees earn 15 days annually.

• At least 10 paid holidays each year.

• Family Building Benefits, which include adoption and fertility assistance.

• Up to 11 weeks of paid parental leave for eligible employees.

• Life Insurance & AD&D with 100% of premiums covered by Milliman.

• Fully covered Short-Term and Long-Term Disability.

• Opportunities for remote work.

• Access to skills training, career development, learning, and mentoring opportunities.

• Participation in Employee Resource Groups (ERGs).