Job Closed
This listing is no longer active.
UPSTARS – продуктова IT-компанія, з якою злітають і люди, і бренди. Наш основний фокус – технологічні рішення та B2B-послуги для міжнародних клієнтів.
Info Security & Cyber security Engineer I
Location
United States
Posted
73 days ago
Salary
$60.4K - $106K / year
Seniority
Mid Level
Job Description
Info Security & Cyber security Engineer I
Excellus BlueCross BlueShield
Job Description: Summary: The Information Security & Cybersecurity Engineer role develops, maintains, and coordinates the Organization’s information security activities in support of the Lifetime Healthcare Companies’ information security program. This position provides technical information security risk management and compliance services and support to the Organization’s lines of business and further provides information security consulting and support to all levels of the Organization’s management in support of the information security program. The cybersecurity disciplines range from Security Operations, Governance Risk and Compliance services, or Identity and Access Management. Essential Accountabilities: Level I • Responsible for the design, implementation, and operation of Organization-wide security infrastructures. Evaluates and proposes new security solutions and advises and consults with the security manager and various levels of management regarding protection of computing resources and information assets. • Assists in the maintenance and operational support for security technologies in defense against modern cybersecurity threats • Delivers support for the Organization’s Information Security Framework and strives to improve maturity of the Information Security program in certain Framework domains. • Respond to requests within defined SLAs relating to various information security systems, programs, and processes. • Maintains risk management documentation to monitor lifecycle progress, track acceptance decisions, and catalog remediation actions. Utilizes automated Governance, Risk, and Compliance tools to track artifacts of the risk management lifecycle. Consults with information systems owners to categorize systems; select, implement, and assess controls; and frame, assess and monitor risk. • Enforces information security policies, standards, and procedures by administering and monitoring security reports; investigates possible security exceptions. • Delivers information risk management services for new and existing automation products and projects. • Participates in rotation of 24/7/365 on call coverage. • Assists in the execution of HIPAA, MAR, PCI, and COBIT compliance activities. • Integrates security tools and appropriate controls into new and existing systems and applications. • Assists in department self-audits, internal audits, external audit reviews, and risk assessments for the division and for end user departments. • Participates in security assessment of supplier and vendors develops recommendations to improve security and mitigate security risks. • Consistently demonstrates high standards of integrity by supporting the Lifetime Healthcare Companies’ mission and values, adhering to the Corporate Code of Conduct, and leading to the Lifetime Way values and beliefs. • Maintains high regard for member privacy in accordance with the corporate privacy policies and procedures. • Regular and reliable attendance is expected and required. • Performs other functions as assigned by management. Level II (in addition to Level I Accountabilities) • Keeps abreast of cyber threat landscape and evolving mitigation approaches and techniques. • Performs as the Subject Matter Expert for at least one information security technology, processes, and practices internally to the Health Plan – including making recommendations relating to this technology. • Provides technical expertise and support to security administrators on distributed systems security and implements automated solutions for security administration requests. • Trains and provides technical support to Security Administrators and lower-level InfoSec & Cybersecurity Engineers on distributed system and application security. • Provides consultation and facilitation support services to the Organization and its subsidiaries in information security matters and ensures compliance with the Organization’s information security policies and standards. • Integrates security tools and appropriate controls into new systems and applications. • Acts as a security consultant for Organization’s IT platforms, databases, middle-wares, and messaging systems (with oversight from a more senior analyst). Level III (in addition to Level II Accountabilities) • Performs as the Subject Matter Expert for at least two information security technology, processes, and practices internally to Health Plan. • Designs, develops, integrates, tests, evaluates, and maintains cybersecurity technology products. • Researches, engineers, and integrates new security solutions with an emphasis on solutions that aligns with overall cybersecurity strategy. • Performs cyber defense incident triage, including determining scope, urgency, and potential impact, and identifying the specific vulnerability. • Provides security consulting to business partners to ensure solution designs are aligned with security principles and cybersecurity frameworks. Level IV (in addition to Level III Accountabilities) • Acts as Team Leader amongst the group of engineers. • Performs as the Subject Matter Expert for more than three information security technologies, processes, and practices internally to the Health Plan, and externally in the industry as a whole. Minimum Qualifications: NOTE: We include multiple levels of classification differentiated by demonstrated knowledge, skills, and the ability to manage increasingly independent and/or complex assignments, broader responsibility, additional decision making, and in some cases, becoming a resource to others. In addition to using this differentiated approach to place new hires, it also provides guideposts for employee development and promotional opportunities. All Levels • Bachelor's degree in computer science, Information Technology, or relevant field. In lieu of degree, six (6) cumulative years of related experience required. • Hands on experience with the following operating systems preferred: mainframe, Windows, and UNIX (Linux, AIX, Solaris, etc.). • Basic knowledge of a minimum of one concept and/or tool listed below: o Encryption o PKI o Network and application security, and related firewalls (Palo Alto Networks, Imperva, etc.) o AD, LDAP, and various authentication implementations o Virus detection and end point security (McAfee preferred) o Vulnerability scanner and pen testing tools (e.g., Rapid 7, Nessus, Nexpose, Metasploit, Appscan, Burp suite, Ida Pro etc.) o IDS/IPS and related tools o SIEM and tools (e.g., ArcSight, Splunk, SolarWind LEM, QRadar, McAfee, etc.) o Common web application security vulnerabilities (e.g., OWASP top ten) • Excellent verbal communications skills and concise written communication skills. • Excellent organization and multi-tasking skills. Level II (in addition to Level I Qualifications) • Three (3) of related work experience, and basic knowledge of a minimum of two (2) concepts and/or tools listed above (under Level I). • Experience with security controls for operating systems, applications, and database management systems. • Experience in evaluating security software packages. • Experience with security automation, including associated reporting and notification. • Knowledge of network regulations, industry standards and operational constraints of networks systems. Level III (in addition to Level II Qualifications) • Five (5) years of related work experience, and basic knowledge of a minimum of three (3) concepts and/or tools listed above (under Level I). • CISSP, CISA, CISM or other relevant security certification, or equivalent experience, and knowledge preferred. • Experience providing work direction for one or more individual’s specific projects and initiatives. • Experience providing guidance and mentorship to more junior team members. • Knowledge of Security Frameworks and translating aspects into enhancing security postures. Level IV (in addition to Level III Qualifications) • Seven (7) years of related work experience, and basic knowledge of a minimum of four (4) concepts and/or tools listed above (under Level I). • Two (2) years demonstrated expertise in at least three (3) concentrations within information security technology. • Experience with creating and managing security architecture. Physical Requirements: • Ability to work prolonged periods sitting and/or standing at a workstation and working on a computer. • Ability to work while sitting and/or standing at a workstation viewing a computer and using a keyboard, mouse and/or phone for three (3) or more hours at a time. • Ability to travel across the Health Plan service region for meetings and/or trainings as needed. • Ability to work in a home office for continuous periods of time for business continuity. ************ In support of the Americans with Disabilities Act, this job description lists only those responsibilities and qualifications deemed essential to the position. Equal Opportunity Employer Compensation Range(s): E3 - Min 60,410 Mid 83,167 Max 106,929 The salary range indicated in this posting represents the minimum and maximum of the salary range for this position. Actual salary will vary depending on factors including, but not limited to, budget available, prior experience, knowledge, skill and education as they relate to the position’s minimum qualifications, in addition to internal equity. The posted salary range reflects just one component of our total rewards package. Other components of the total rewards package may include participation in group health and/or dental insurance, retirement plan, wellness program, paid time away from work, and paid holidays. Please note: There may be opportunity for remote work within all jobs posted by the Excellus Talent Acquisition team. This decision is made on a case-by-case basis. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, or status as a protected veteran.
Related Guides
Related Categories
Related Job Pages
More Security Engineer Jobs
• Design, implement, and optimize SIEM solutions to meet evolving business needs • Build and manage SIEM workflows and connectors, ensuring seamless integration of various data sources • Develop, test, and tune Kibana Security detection rules • Investigate Kibana Security alerts and document findings, scope, and recommended actions • Analyze telemetry across identity, endpoint, network, and cloud data sources • Improve alert fidelity through tuning, exception management, and rule lifecycle maintenance • Map detection logic to MITRE ATT&CK and maintain investigation guidance • Build dashboards, saved searches, and queries to support investigations and operational visibility • Partner with SecOps, IR, IAM, cloud, and infrastructure teams to improve detection coverage and response quality • Identify data quality gaps, field mapping issues, and logging deficiencies that affect detection quality
OT Cyber Security SME – ERCIS
General Electric - GEBuilt on more than 130 years of experience, GE Vernova, a division of General Electric (GE), is leading a new era of energy by electrifying the world while work
• Own the cybersecurity expertise (subject matter expert) for Grid Automation within a given territory / region. • Assist the Sales Operations teams in responding to demo requests, RFPs, and other Bid/Tender requests. • Stay connected with the market dynamics, engage with GA customers to understand their cybersecurity needs / pain-points, and translate them into new cybersecurity sales opportunities. • Present the Grid Automation cybersecurity offerings to customers in a variety of locations – including trade shows and events. • Develop sophisticated cybersecurity designs for customer environments. • Understand competitors’ offerings, industry trends, customers’ behavior. • Be available to be “hands-on” at customer sites to assist in the design, configuration, and installation of a variety of cybersecurity offerings. • Promote the GA cybersecurity offerings with utility and industrial customers and the GA sales organization. • Drive productive interactions with GA region teams, other GA Product Managers, R&D and product development, Technical Application Engineering, and Commercial teams. • Develop, coach, and mentor the regional cybersecurity delivery teams (customer engineers) to strengthen their overall technical and business capabilities. • Develop and conduct training on a variety of cybersecurity topics for the Regions and GA staff as needed.
Who We AreFounded in 2012 by 3 expert hackers with no investment capital, Trail of Bits is the premier place for security experts to boldly advance security and address technology’s newest and most challenging risks. It has helped secure some of the world's most targeted organizations and devices. Our combination of novel research with practical solutions reduces the security risks that our clients face from emerging technologies. Our work helps drive the security industry and the public understanding of the technology underlying our world. Cybersecurity preparedness is a moving target. Companies like ours are the tip of the spear in the fight against attackers. Our research-based and custom-engineering approach ensures that our client’s capabilities are at the forefront of what’s available. For companies and technologies that live and die by their security, a proactive, tailored approach is required to keep one step ahead of attackers. Democratizing security information is essential. As part of our business, we provide ongoing informational support through blogs, whitepapers, newsletters, meetups, and open-source tools. The more the community understands security, the more they’ll understand why a company like ours is so unique and valuable. RoleTrail of Bits seeks a Security Engineer, Application Security within our growing Software Assurance practice. You will conduct comprehensive security assessments of client software with a focus on low-level code analysis, examining system architecture, security boundaries, access controls, and platform security mechanisms. On any given day, you might analyze vulnerabilities in application code, automate the detection of security misconfigurations in cloud environments, assess privilege escalation capabilities, or review security boundaries in complex systems. Working alongside other security engineers, you'll contribute to client projects while building impactful tools. In short, your work will land at the intersection of Vulnerability Research and Application Security. In addition to working with leading technology companies in the private sector, you will have opportunities to collaborate with our Research & Engineering team to help secure funding from government agencies for advanced security research that bridges vulnerability research and application security, advancing the state of the art both within our team and industry at large. Please note that only applications completed via our Careers page will be considered for further review. What You’ll Achieve - Security Assessment: Conduct comprehensive low-level code security assessments across applications, examining vulnerabilities in system services, access control implementation, inter-process communication, and platform security controls while developing mitigation strategies. - Security Tool Development: Design and implement custom security tools for automated vulnerability detection, focusing on both application-specific and general security testing needs to bridge the gap between vulnerability research and application security. - Architecture Review: Perform detailed architecture reviews and threat modeling of complex software systems and cloud environments, identifying potential security weaknesses in areas such as data flows, authentication mechanisms, and API security while providing remediation guidance. - Client Engagement: Work directly with industry-leading teams to review their application infrastructure and architecture, helping secure their environments through deep technical analysis and recommendations. - Research & Innovation: Contribute to the advancement of application security, developing new methodologies and tools while staying up to date with the latest security developments in both traditional and emerging technology ecosystems. What You’ll Bring - Application Security Expertise: Extensive experience in software security, with demonstrated ability to identify and mitigate application and system-level vulnerabilities in code across complex enterprise software and understanding of security controls. - Assessment Experience: Track record of conducting technical security assessments of software, including software and system hardening, security policy analysis, and implementing effective security measures; Experience with Android, iOS, and/or macOS system internals a plus. - Technical Capabilities: Deep understanding of system internals and security boundaries, experience with manual code reviews, static and dynamic analysis tools, expertise in secure development practices, experience with binary analysis and reverse engineering, and understanding of memory corruption vulnerabilities and mitigations. - Programming Proficiency: Strong knowledge of multiple programming languages such as Rust, Golang, Kotlin, Swift, Objective-C, JavaScript/TypeScript, Python, Ruby, C and/or C++ for both security analysis and tool development. - Communication Skills: Ability to effectively communicate complex security concepts to diverse stakeholders and deliver clear, actionable recommendations. The base salary for this full-time position ranges from $100,000 to $200,000 excluding benefits and potential bonuses. Various factors influence our salary ranges, including the specific role, level of seniority, geographic location, and the nature of the employment contract. An individual's specific work location, unique skills, experience, and relevant educational background will determine the final offer within this range. The presented salary range encompasses the starting salaries for all U.S. locations. For a precise salary estimate tailored to your preferred location, please discuss it with your recruiter during the hiring process. Trail of Bits, Inc. participates in E-Verify, the US federal electronic employment eligibility verification program. Learn more. Only applications completed via our Careers page will be considered for further review. When you apply, you'll be added to our newsletter so you can stay updated on company news and opportunities. You can opt out anytime. BenefitsBenefits, Perks & WellnessTrail of Bits is our people, not a place. With over 100+ employees working from every time zone across the globe, our remote-first culture is built on autonomy and trust (and backed by smile-worthy benefits) for full-time employees: Empowered Living: - Competitive salary complemented by performance-based bonuses. - Fully company-paid insurance packages, including health, dental, vision, disability, and life. - A solid 401(k) plan with a 5% match of your base salary. - 20 days of paid vacation with flexibility for more, adhering to jurisdictional regulations. Nurturing New Beginnings: - 4 months of parental leave to cherish the arrival of new family members. - Our team is global and remote-first. However, if you are interested in moving to NYC, we offer $10,000 in relocation assistance to support your transition. Work & Life Enrichment: - $1,000 Working-from-Home stipend to create a comfortable and productive home office. - Annual $750 Learning & Development stipend for continuous personal and professional growth. - Company-sponsored all-team celebrations, including travel and accommodation, to foster community and recognize achievements. Community Impact: - Philanthropic contribution matching up to $2,000 annually.
Senior Security Engineer
College BoardAt College Board, we offer more than a paycheck- we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive.
College Board – Technology – Security Location: This is a fully remote role. Candidates who live near CB offices have the option of being fully remote or hybrid (Tuesday and Wednesday in office). Type: This is a full-time position About the Team The Security Engineering team partners across the Technology division to reduce risk and enable secure, scalable systems at College Board. We design and operate the tools, standards, and review processes that help teams build securely by default—covering areas such as application security, data protection, and cloud environments. Our team operates with a mindset of trust and verification, pairing strong engineering practices with pragmatic governance. We value candid feedback, continuous improvement, and close collaboration with stakeholders to translate security requirements into practical, adoptable solutions that drive measurable risk reduction. About the Opportunity As a Senior Security Engineer, you will play a key role in ensuring the College Board systems are following established best practices. This will include a combination of managing security focused technologies as well as ensuring that non security focused applications are configured to reduce risk for the organization In this role, you will combine hands-on security engineering with collaborative governance. You will work directly with delivery teams to perform practical, risk reviews, assessing architectures, data flows, and misuse risks—while also helping evolve the organization’s security review practices so they remain effective and drive risk reduction through standardization. Your work will turn real-world experience into clear standards, guidance, and secure-by-default patterns to help the organization become predictable and repeatable rather than ad hoc. You will have meaningful latitude to shape how applications are configured to ensure that organizational and industry best practices are met. You will have visible impact by reducing shadow IT risk, preventing sensitive data exposure, and improving time-to-approval through pragmatic, engineering-friendly security guidance. Success in this role requires close collaboration with Information Security partners, teams across the Technology division, and stakeholders in other divisions to translate emerging risk into shared understanding, aligned expectations, and durable security outcomes. In this role, you will: Enable cross-functional delivery and execution (40%) - Collaborate closely across delivery teams to align on security controls and enable secure implementation. - Participate in and frequently lead working sessions to unblock teams—translating policy into practical implementation steps that fit Agile delivery. - Run periodic spot checks and audits to validate that governance, security conditions, and monitoring remain effective over time, including re-review cadences for production use cases. - Contribute to team ceremonies, documentation, and continuous improvement to keep the program efficient, measurable, and trusted. Lead security governance and guidance (35%) - Serve as the primary security review partner for use-case assessments working collaboratively with Information Security, Technology teams, and governance stakeholders to continuously refine and improve the security review process based on real implementations, incidents, and emerging risks. - Lead hands-on security assessments for use cases, including data classification and handling, threat modeling, vendor and model risk considerations, and misuse testing. - Define, evolve, and maintain secure-by-default standards, patterns, templates, and reference guidance (e.g., documentation expectations, security checklists, and decision records), shaping how security reviews and guardrails operate in practice as adoption matures while reducing review friction and cycle time. - Define and drive enterprise security expectations for usage, including telemetry, logging, and monitoring requirements that enable detection, investigation, and prevention of misuse across sanctioned systems. Monitor and reduce shadow IT (25%) - Establish a program to identify and reduce shadow IT by working with IT and Security teams on discovery signals (proxy/DNS/app discovery, endpoint telemetry) and remediation paths. - Produce actionable reporting for leadership including use-case coverage, review outcomes, risk themes, time-to-approve, exceptions, and remediation status. - Partner with Security Operations to implement and tune misuse detections and alerting (e.g., sensitive-data prompts, abnormal usage spikes, repeated jailbreak attempts, suspicious tool calls) About you, you have: - 7+ years in security engineering, application security, cloud security, or security architecture, with demonstrated ownership of work that scales across multiple teams. - Practical experience assessing and securing systems, including application-layer risks, data exposure concerns, and common misuse scenarios. - Practical experience securing modern software systems (APIs, cloud services, CI/CD) and applying those security fundamentals . - Comfort operating in ambiguous, fast-moving environments where standards, tooling, and processes are still being defined and refined. - Strong ability to influence and drive change across organizations, balancing speed of delivery with clear guardrails and measurable risk reduction. - Experience partnering with non-security stakeholders (e.g., product, legal, risk, procurement, operations) to translate security requirements into practical, adoptable guidance. - Confidence presenting security requirements and tradeoffs to stakeholders, and turning ambiguous problems into repeatable processes and standards. - Effective communicator and technical leader, able to provide actionable feedback, mentor peers and junior engineers, and participate in interviews to evaluate engineering talent. - Ability to travel 3–5 times per year to College Board offices. - Authorization to work in the United States. All roles at College Board require: - A passion for expanding educational and career opportunities and mission-driven work - Authorization to work in the United States for any employer - Curiosity and enthusiasm for emerging technologies, with a willingness to experiment with and adopt new solutions and a comfort learning and applying new digital tools independently and proactively. - Clear and concise communication skills, written and verbal - A learner's mindset and a commitment to growth: welcoming diverse perspectives, giving and receiving timely, respectful feedback, and continuously improving through iterative learning and user input. - A drive for impact and excellence: solving complex problems, making data-informed decisions, prioritizing what matters most, and continuously improving through learning, user input, and external benchmarking. - A collaborative and empathetic approach: working across differences, fostering trust, and contributing to a culture of shared success. About Our Process - Application review will begin immediately and will continue until the position is filled. This role is expected to accept applications for a minimum of 5 business days. Preferred application deadline is Sunday, November 30th. Please keep in mind that College Board offices will be closed November 27th – November 28th and December 25th – January 2nd so it is better to apply sooner than later. - While the hiring process may vary, it generally includes: resume and application submission, recruiter phone/video screen, hiring manager interview, performance exercise such as live coding, a panel interview, a conversation with leadership and reference checks. What We Offer At College Board, we offer more than just a paycheck—we provide a meaningful career, a supportive team, and a comprehensive package designed to help you thrive. We’re a self-sustaining nonprofit that believes in fair and competitive compensation, grounded in your qualifications, experience, impact, and the market. A Thoughtful Approach to Compensation - The hiring range for this role is $153,000 - $166,000 - Your exact salary will depend on your location, experience, and how your background compares to others in similar roles at the College Board. - We aim to make our best offer upfront—rooted in fairness, transparency, and market data. - We adjust salaries by location to ensure fairness, no matter where you live. You’ll have open, transparent conversations about compensation, benefits, and what it’s like to work at College Board throughout your hiring process. Check out our careers page for more. #LI-DC1 #LI-REMOTE
