job summary
Enterprise Healthcare client has an immediate opening for a highly motivated Infrastructure Security Engineer II to join their dynamic and growing team. All qualified candidates are encouraged to apply!
location: Telecommute
job type: Contract
salary: $40.76 - 50.76 per hour
work hours: 8am to 4pm
education: Bachelors
responsibilities
What is the purpose of this team?
What is driving this need? (ex. Backfill for FTE or CW, new project, business growth)
Describe the surrounding team (team culture, work environment, etc.) & key projects.
Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? - The mission of the Secure Posture Engineering (SPE) Team is to engineer, operate, and continuously improve security platforms, tooling, data pipelines, and validation capabilities that enable accurate, scalable, and actionable exposure management across the enterprise. SPE continuously identifies what exists, what is exposed, and what truly matters, then supports remediation through evidence-based prioritization. The focus is on exposures that are reachable, applicable, and exploitable in our environment, ensuring teams spend time fixing the risks that reduce maximum business impact.
Contractor support is requested to absorb foundational engineering and operational work, enabling senior engineers to focus on higher-value security initiatives, complex technical challenges, and critical risk reduction efforts. This investment will accelerate program delivery, improve operational maturity, reduce backlog pressure, and create an opportunity to identify and recruit high-performing talent through a contract-to-hire model.
High-performing Team in a positive, collaborative environment where people feel trusted, valued, and appreciated. Key projects: Attack Surface Management - Cloud (Wiz) & On Prem (Tenable), external asset inventory discovery and exposure; Asset, exposure and posture correlation, normalization and prioritization across Cloud & On Prem (Armis AMS / VIPR and Zafran); Secure configuration baseline compliance measurement and drift across Cloud (Wiz) and On Prem (Tenable) environments.
No additional hiring needs beyond these 2 positions.
Typical Day in the Role
Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).
What are the performance expectations/metrics?
What makes this role unique? - Day-to-Day responsibilities (Platform & Integration Engineer) across all tools:
Responsible for engineering and maintaining the Secure Posture Engineering tooling, data pipelines, and integrations, ensuring reliable ingestion, normalization, and distribution of posture and exposure data across platforms and into enterprise workflow systems. Ensures data quality, consistency, and availability to support triage, prioritization, reporting, and remediation at scale.
Key Responsibilities
Engineer and maintain integrations across posture, exposure, and asset data sources to ensure consistent and complete data coverage
Build and operate data pipelines to ingest, transform, and distribute security findings across platforms
Normalize asset identifiers, ownership metadata, and finding schemas to create a unified data model
Publish validated and enriched findings into ServiceNow for workflow routing, assignment, and lifecycle tracking
Monitor and improve data quality, pipeline performance, and integration reliability across the ecosystem
Partner with triage, architecture, and platform teams to align data outputs with operational and business needs
Performance Expectations/Metrics:
Increased visibility into the enterprise internet-facing footprint, including unknown, unmanaged, and atypical assets introducing measurable exposure
Reduced time from discovery and validation of material exposures to workflow publication in ServiceNow for ownership attribution and remediation tracking
Reduction in critical and exploitable exposures through evidence-based prioritization aligned to reachability, exploit likelihood, and business impact
Improved quality and consistency of normalized finding data, including evidence completeness, asset mapping accuracy, and reduced duplicate or unstable records
Improved control effectiveness through continuous validation of preventive and detective controls against priority threats and techniques
Demonstrated reduction in exposure windows for high-risk findings and improved transparency into risk burn-down and closure progress
What makes this role unique?
Building a comprehensive program to discover, assess and communicate internet exposed assets across both the Cloud and On Prem environments. This role is the bridge between detecting security issues and enabling the enterprise to act on the right risks quickly, consistently, and at scale.
qualifications: Bachelors
skills
Agile
API
CompTIA Security+
Security+
networking technologies
CIAM
data analysis
Data pipeline
IT General Controls
Enterprise IT
computer science
Excel
Microsoft Visio
SCRUM
shell scripts
software development methodologies
SDLC
strong analytical and critical thinking
attention to detail
critical thinking
sound judgment
decision-making
Soft Skills
Reliability
Ability to work independently
independently
CISM
CISSP
CompTIA Security+ Certification
Security+
Encryption
cybersecurity certification
collect data
establish facts
infrastructure security
Baseline security
mathematics
statistics
National Institute of Standards and Technology (NIST)
process modeling
risk identification
security risk assessments
Standardization
hard skills