[Remote] Senior Security Engineer

Note: The job is a remote job and is open to candidates in USA. TASC is the nation’s largest privately held third party benefits administrator of employee benefits, dedicated to improving the health, wealth, and well-being of its customers and communities. They are seeking a Senior Security Engineer to provide technical leadership in information security, ensuring the confidentiality, integrity, and availability of organizational systems and data while designing and maintaining security controls and monitoring threats.ResponsibilitiesTake a leading role in securing the systems and data from potential threats or compromiseDesign, implement, and execute systems’ security defenses and capabilities across networks, databases, and internet/web operationsDevelop, implement, and effectively execute the security and monitoring operationsInvestigate security incidents and potential compromises to TCB systems and take actions to protect TCB systems. Utilize forensic best practices to investigate and maintain evidence integrityOversee and enforce identity and access management controls, including privileged access governance, role-based access reviews, and integration of identity systems with enterprise authentication and authorization frameworksConsuming and operationalizing threat intel feeds (threat intelligence integration) to create/improve detection rules and make better risk decisionsConsult on projects, design reviews, threat modeling sessions, and change board process to provide guidance on security architecture, posture, and/or impact as well as to ensure the integrity of new and/or existing business operationsContinually evaluate TCB systems exposure to existing threats; including but not limited to reviewing security capabilities and provide advice on mitigating controlsConsult and provides suggestions to management on security related mattersProduce security metrics, KPIs, and reporting upwards to management or the boardStay informed and tuned to security industry trends, potential threats and vulnerabilitiesResearch, evaluate, and make recommendations regarding security trends and innovationsEvaluate system changes across the organization to assess and document the security risk and impactEvaluate third-party tools, vendors, or integrations for security risksReview and document policies, standards and procedures to maintain complianceEvaluate compliance and contractual requirements relative to systems capabilitiesProvide leadership, expertise and solutions on complex initiatives related to securityMentor others and may represent management at timesTakes a leadership role on highly complex projects and provides guidance to less experienced staffOperates within TCB’s guidelines pursuant to the Employee Handbook and all Policies and ProceduresPerform additional duties as requested by Supervisor and/or ManagementSkillsBachelor's Degree or equivalent work-related experience in Computer Science, Information Systems, or other Information Technology related fieldMinimum of 8 years' of combined Information Technology and Information Security experience, with at least 5 years in a dedicated security roleMinimum of 5 years' experience with regulated environments with compliance requirements (e.g., NIST, SOC2, PCI DSS, ISO, CIS, HIPAA)Minimum of 5 years' experience leading implementation, optimization, and integration of security technologies across enterprise environments (i.e., Splunk, Tenable IO & SC, ProofPoint)Minimum of 5 years' experience with cloud platforms (AWS preferred)CISSP certification is requiredStrong incident response skills across detection, investigation, containment, and recovery especially in complex cloud-native environmentsAbility to draft security policies, standards, procedures and other forms of documentationSuccess in building controls and processes to align with best practicesStrong ability to synthesize information from multiple sourcesExcellent communication and listening skills with ability to interact effectively with all levels of managementAbility to work independently while maintaining deliverables. This includes the ability to develop relationships through building trust and credibilityExercise independent technical judgment on security matters, including real-time incident response decisions, risk acceptance determinations, and security architecture recommendations, escalating to management where business impact or policy thresholds requireAbility to participate in a shared on-call rotation for security incidentsAdditional certifications are a plus (i.e., CCSP, AWS-specific certifications)Knowledge of AWS monitoring and logging tools such as Cloud watch, Cloud Trail, Security Hub, Guard Duty, etc. is a plusCompany OverviewTASC (Total Administrative Services Corporation) is an award-winning nationwide administrator of tax-advantaged health benefits plans offering comprehensive services for Clients, Participants, and Providers and serving companies ranging in size from one employee to thousands! New product development, innovative tools, and outstanding, transparent service keep TASC’s service offerings at the forefront of third-party benefits administration. It was founded in 1975, and is headquartered in Madison, Wisconsin, USA, with a workforce of 501-1000 employees. Its website is https://www.tasconline.com.