Infrastructure Security Engineer II

job summary

Enterprise Healthcare client has an immediate opening for a highly motivated Infrastructure Security Engineer II to join their dynamic and growing team. All qualified candidates are encouraged to apply!

location: Telecommute

job type: Contract

salary: $40.76 - 50.76 per hour

work hours: 8am to 5pm

education: Bachelors

responsibilities

• What is the purpose of this team?
• What is driving this need? (ex. Backfill for FTE or CW, new project, business growth)
• Describe the surrounding team (team culture, work environment, etc.) & key projects.
• Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? - The mission of the Secure Posture Engineering (SPE) Team is to engineer, operate, and continuously improve security platforms, tooling, data pipelines, and validation capabilities that enable accurate, scalable, and actionable exposure management across the enterprise. SPE continuously identifies what exists, what is exposed, and what truly matters, then supports remediation through evidence-based prioritization. The focus is on exposures that are reachable, applicable, and exploitable in our environment, ensuring teams spend time fixing the risks that reduce maximum business impact.
• Contractor support is requested to absorb foundational engineering and operational work, enabling senior engineers to focus on higher-value security initiatives, complex technical challenges, and critical risk reduction efforts. This investment will accelerate program delivery, improve operational maturity, reduce backlog pressure, and create an opportunity to identify and recruit high-performing talent through a contract-to-hire model.
• High-performing Team in a positive, collaborative environment where people feel trusted, valued, and appreciated. Key projects: Attack Surface Management - Cloud (Wiz) & On Prem (Tenable), external asset inventory discovery and exposure; Asset, exposure and posture correlation, normalization and prioritization across Cloud & On Prem (Armis AMS / VIPR and Zafran); Secure configuration baseline compliance measurement and drift across Cloud (Wiz) and On Prem (Tenable) environments.
• No additional hiring needs beyond these 2 positions.
• Typical Day in the Role
• Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).
• What are the performance expectations/metrics?
• What makes this role unique? - Day-to-Day responsibilities (ASM Engineer) Tenable & Wiz:
• Responsible for execution of exposure triage within Secure Posture Engineering, ensuring findings are validated for reachability and applicability, enriched with business and attack-path context, and prepared as high-confidence outputs for existing downstream workflow routing and remediation.
• Key Responsibilities
• Validate exposure reachability and applicability using available telemetry, configuration data, and environmental context
• Curate and assemble evidence to support exposure accuracy, impact, and prioritization decisions
• Enrich findings with business context, asset criticality, and attack-path analysis to improve risk clarity
• Normalize and prepare triaged outputs for routing into remediation, exception, or risk acceptance workflows
• Reduce false positives and duplicate findings through correlation, deduplication, and validation processes
• Partner with vulnerability management, cloud, application, and platform teams to ensure actionable and context-rich outputs
• Continuously improve triage methodologies, enrichment techniques, and signal quality
• Performance Expectations/Metrics:
• Increased visibility into the enterprise internet-facing footprint, including unknown, unmanaged, and atypical assets introducing measurable exposure
• Reduced time from discovery and validation of material exposures to workflow publication in ServiceNow for ownership attribution and remediation tracking
• Reduction in critical and exploitable exposures through evidence-based prioritization aligned to reachability, exploit likelihood, and business impact
• Improved quality and consistency of normalized finding data, including evidence completeness, asset mapping accuracy, and reduced duplicate or unstable records
• Improved control effectiveness through continuous validation of preventive and detective controls against priority threats and techniques
• Demonstrated reduction in exposure windows for high-risk findings and improved transparency into risk burn-down and closure progress
• What makes this role unique?
• Building a comprehensive program to discover, assess and communicate internet exposed assets across both the Cloud and On Prem environments. This role is the bridge between detecting security issues and enabling the enterprise to act on the right risks quickly, consistently, and at scale.

qualifications: Bachelors

skills

Agile

CompTIA Security+

Security+

networking technologies

CIAM

data analysis

IT General Controls

Enterprise IT

computer science

Excel

Microsoft Visio

SCRUM

shell scripts

software development methodologies

SDLC

strong analytical and critical thinking

attention to detail

critical thinking

sound judgment

decision-making

Soft Skills

Ability to work independently

independently

CISM

CISSP

cross-functional communication

CompTIA Security+ Certification

Security+

Encryption

cybersecurity certification

collect data

establish facts

infrastructure security

Baseline security

mathematics

statistics

National Institute of Standards and Technology (NIST)

process modeling

risk identification

security risk assessments

Risk

Standardization

technical analysis

hard skills