Senior Information Security Engineer - End Point - Fully Remote

This Sr. Information Security Engineer (End Point) position is a fully remote opportunity, allowing you to work from the comfort of your own home from anywhere in the US.

Promotes a positive security culture for the organization by protecting the confidentiality, integrity, and availability of data and assets while assisting the company to successfully meet its strategic goals. Provides senior level expertise from various IT disciplines with focus in information security. This role will contribute to the design, engineering, development and maintenance of security processes and solutions throughout the enterprise according to policy and risk. This role will contribute to the design, development, and maintenance of the security environment and architecture to ensure the assets are protected. Be a champion to their team and other business units to promote a secure organization through positive knowledge sharing, training, influences, and conduct.

• Manages and maintains adequate security processes and solutions to mitigate or remediate identified risks sufficiently to meet business objectives, contractual and/or regulatory requirements.

• Leads incident response activities, ensuring security incidents are properly contained, eradicated, and recovered.

• Supports in the development of security policies, standards and plans to ensure the protection of corporate data against unauthorized use, access, modification and destruction.

• Ensures proper security logs are generated and sent to the organization's Security Information and Event Management (SIEM) system.

• Researches emerging technologies in support of IT security enhancement and development efforts.

• Persistently evaluates adherence with defined policies and standards.

• Drives efforts with identifying, remediating, and/or mitigating vulnerabilities in the environment, ensuring appropriate response to high risk and aged findings.

• Designs, implements, and maintains a secure environment for Magellan Health.

• Ensures Magellan security processes and solutions are protected against a failure or attack that reduces the organization's ability to respond to security incidents.

• Ensures Magellan processes and solutions are maintained securely and highly available to protect the confidentiality, integrity and availability of assets

• Monitors and ensures systems revisions and patches are up-to-date.

• Manages and performs changes to the solutions and removes unnecessary services.

• Understands risks and impact to systems in the corporate environment and their interconnectivity.

• Builds team unity by supporting other engineers to understand security risks and impact to corporate solutions.

• Supports others in performing forensic analysis and risk assessments for the entire infrastructure.

• Designs and manages enterprise high-availability solutions running a complex arrangement of operating systems, including system updates, log analysis, access controls and backup.

• Performs changes to the solution configurations to add new services, adapt existing services, and removes unnecessary services.

• Monitors, remediates and mitigates security violations for network, devices, servers and other assets

• Designs, implements and maintains security guidelines and a security infrastructure for Magellan Health.

• Develops technical solutions to autonomously verify compliance with required technical controls.

Other Job Requirements

Responsibilities

5+ years of IT experience required.

May substitute 2 or more relevant certifications for a year of experience.

Able to effectively manage evolving and competing objectives and possess a wide range of knowledge of information security tools and techniques. 

Has strong communication, and negotiation skills.  Results driven with a bias for action.  Demonstrated knowledge in 3 or more of the following information security principles: risk assessment and management, threat and vulnerability management, incident response, and identity & access management.

Understands network protocols and packet analysis tools such as TCPDUMP and Wireshark.

Knowledge of and experience with security-related systems and applications, firewalls, load balancers, intrusion detection/prevention, and web content filtering.

Familiarity with information security publications (e.g., NIST 800-53), incident response, problem resolution, vulnerability remediation, computer forensic techniques and eDiscovery, reviewing automated security test results, and network and host-based firewalls.

Ability to work with multi-discipline teams and cross-functional management.

Excellent verbal and written communication skills with the ability to collaborate effectively with other groups.

General Job Information

Title

Senior Information Security Engineer - End Point - Fully Remote

Grade

28

Work Experience - Required

IT

Work Experience - Preferred

Information Security

Education - Required

Education - Preferred

Bachelors - Information Security

License and Certifications - Required

License and Certifications - Preferred

CEH-Certified Ethical Hacker - Enterprise, CISSP - Certified Information Systems Security Professional - Enterprise, GISP-GIAC Information Security Professional - Enterprise, GSEC-SANS GIAC Security Essentials - Enterprise, Network+ - Enterprise, Security+ - Enterprise

Salary Range

Salary Minimum:

$83,890

Salary Maximum:

$142,610

This information reflects the anticipated base salary range for this position based on current national data. Minimums and maximums may vary based on location. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law.

This position may be eligible for short-term incentives as well as a comprehensive benefits package. Magellan offers a broad range of health, life, voluntary and other benefits and perks that enhance your physical, mental, emotional and financial wellbeing.

Magellan Health, Inc. is proud to be an Equal Opportunity Employer and a Tobacco-free workplace. EOE/M/F/Vet/Disabled.
Every employee must understand, comply with and attest to the security responsibilities and security controls unique to their position; and comply with all applicable legal, regulatory, and contractual requirements and internal policies and procedures.