Note: The job is a remote job and is open to candidates in USA. Optum Serve helps federal agencies and communities across the nation address major health care and public health challenges. The Senior Information Security Engineer serves as a cybersecurity subject matter expert, implementing security solutions and controls across on-premises and cloud infrastructure while supporting NIST, FISMA, ATO, and CMMC requirements. The role also manages vulnerabilities, security operations, incident response, and collaboration with infrastructure, operations, business, and IT teams.
Responsibilities
- Serves as a Subject Matter Expert (SME) for security tool sets
- Work with Optum security teams to implement new software, policy configurations & settings
- Evaluate and recommend security controls and tooling for on-premises and cloud infrastructure
- Develop innovative approaches and solves complex problems
- Liaise with Business and IT Groups in the security analysis, design and planning phases of IT and business-related projects
- Create and maintain new and existing playbooks/runbooks, work with multifunctional team members to maintain high-quality work standards
- Evaluate vulnerabilities that exist and make recommendations for remediation
- Ensure day-to-day operational tasks are performed and security metrics are relevant and current
- Maintain expertise in the area of Information Security, including industry trends, strategies, vulnerabilities and threats to ensure the company’s assets are effectively and appropriately secured
- Participate in security incident response processes on a per-occurrence basis
- Availability off hours as needed to support incidents
Skills
- Experience leveraging AI tools in the software development (or product) lifecycle in order to improve quality and efficiency
- Five plus (5+) years of information security experience; including three (3) years of FISMA related experience
- Three (3) years of experience with Assessment and Authorization (A&A) and Independent Verification & Validation (IV&V)
- Experience with federal cyber security standards (such as NIST 800-53, NIST 800-171)
- Experience with certification and accreditation process (DIACAP, NIST RMF)
- Possess at least one of the following certifications: CISSP, CISM, CISA, CCSP or other relevant security certifications
- Network/application/system vulnerability and threat management experience
- US Citizen
- Ability to obtain favorable adjudication following submission of Department of Defense
- Bachelor's degree in Computer Science, Information Management, related field, OR 4+ years of information security experience
- Work experience supporting federal security programs (DoD, VA, DHS preferred)
- Prior military service
- Tanium security platform administration
- Tenable administration
- Experience with Symantec Endpoint Protection
- Experience with Azure Government
- Experience working in a large enterprise
- Experience working with Palo Alto Firewalls
- Experience with data loss prevention (DLP) and endpoint detection and response (EDR) systems
- Demonstrated written executive communication and presentation skills
Company Overview