Note: The job is a remote job and is open to candidates in USA. Centene Corporation is hiring a Senior Infrastructure Security Engineer to operate and mature its Attack Surface Management and Breach Attack Simulation programs across hybrid, cloud, on-premises, and enterprise environments. The role improves security visibility and reduces risk by validating assets and controls, coordinating remediation, maintaining accurate inventories, and reporting actionable findings.
Responsibilities
- Ensures the implementation and maintenance of application security standards as per industry best practices
- Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement
- Audits of application security and operational configurations
- Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc
- Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties
- Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards
- Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process
- Undertakes initiatives/policies to review and generate recommendations for the application security configuration
- Performs other duties as assigned
- Complies with all policies and standards
Skills
- Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future
- A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science)
- Requires 4 – 6 years of related experience
- Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position
- Attack Surface Management: Tenable and Wiz
- Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling
- Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz
- Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools
- Intermediate - Seeks to acquire knowledge in area of specialty
- Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
- Intermediate - Ability to work independently
- Intermediate - Demonstrated analytical skills
- Intermediate - Demonstrated project management skills
- Intermediate - Demonstrates a high level of accuracy, even under pressure
- Intermediate - Demonstrates excellent judgment and decision making skills
- Attack Surface Management and external asset discovery
- Breach Attack Simulation, adversary emulation, control validation, and security detection improvement
- Asset inventory management, ownership validation, and security coverage assessment
- Vulnerability management, remediation coordination, and ServiceNow workflow support
- Security reporting, metrics development, process documentation, and cross-functional program coordination
- CompTIA Security+ Certification preferred
Benefits
- Health insurance
- 401K
- Stock purchase plans
- Tuition reimbursement
- Paid time off plus holidays
- A flexible approach to work with remote, hybrid, field or office work schedules
Company Overview