Position Summary:The Sr. Security Engineer will report to the Technology Department. This role will build and examine reports, data, and analytics to improve and troubleshoot security systems. The Senior Security Engineer is expected to administer and maintain access to security systems. This role will be responsible for immediate response to team member and stakeholder emails, phone calls, and ad-hoc inquiries. This role includes regular on-call responsibilities to ensure continuous operational support outside standard business hours. The typical on-call schedule is one week per month. On-call shifts may include evenings, weekends, and holidays as part of a rotating schedule. During on-call periods, employees must be reachable by phone, Microsoft Teams, and/or Microsoft Outlook and able to respond within a 60-minute window.
Duties and Responsibilities:- Develop a strong knowledge and skillset across all security functional areas including application security, technical project management, third party risk, policy governance, awareness training.
- Contribute and assist in the coordination of evidence collection and audit maintenance for organizational assessments.
- Contribute to all aspects of application security, including vulnerability assessments, penetration testing, code review, and security training.
- Coordinate and assist in the evidence collection and response queries for inbound and outbound security and IT due diligence as part of a third-party risk management program.
- Assist in the implementation of security related SDLC practices including code reviews, static/dynamic code analysis and vulnerability assessments.
- Maintain awareness of known vulnerabilities in application technologies used within Inspira.
- Research into suspected application vulnerabilities.
- Lead efforts to respond to findings from audits, security questionnaires, and internal/external scanning or testing.
- Assist in the development of the policies and procedures related to information security, ensuring compliance with relevant regulations and standards.
- Coordinate risk assessments on third-party vendors. Triage and implement appropriate controls to mitigate identified risks.
- Assist and coordinate cross-functional work with other internal business units, such as Compliance, Legal, IT, Finance, HR, and engage with other leaders to drive security outcomes that benefit the organization.
- Track and provide security metrics, status updates and reports for the Inspira Security Program
- Provide guidance to Security Engineer I/II roles.
- Other duties as assigned.
Education and Experience:- 5-7 years of experience
- Bachelor's Degree in Computer Science, Software/Computing Engineering, Applied Mathematics, or related field.
- Technical Certifications a plus
Skills and Abilities:- Highly self-motivated
- Possess a combination of technology, security, and analytics skills.
- Knowledge of the Financial or Insurance Services Industry preferred.
- Intellectual curiosity to find new and unusual ways of how to solve cyber security issues.
- Ability to approach cyber security challenges while keeping an eye on what is important.
- Experience interpreting, analyzing, and maintaining systems.
- Ability to create and maintaining respectful, strong working relationships with both IT and business units to integrate security principles with business operations.
- Strong client service orientation
- Ability to prioritize, plan and take initiative and be highly self-motivated.
- Strong verbal and written communication skills; positive attitude; ability to work as team member.
- Experience in a high availability environment preferred.
- Knowledge of NIST and CIS practices and frameworks preferred.
Other Requirements:- Infrequent travel
- Prolonged periods of sitting at a desk and working on a computer
- Participate in the team's on-call rotation to monitor and respond to security alerts and incidents in real time.
- Acknowledge alerts from the designated on-call monitoring system within a 60-minute window and provide a quick status update (e.g., "Investigating," "Will engage within X minutes," etc.).
- Ensure your company-issued laptop and required access tools are available during on-call shifts, including when traveling or away from your primary work location for extended periods.
- Maintain readiness to troubleshoot, mitigate, or escalate security issues in accordance with established incident response procedures.
