Information Security Engineer

Responsibilities:

• Security engineering and architecture background for both corporate and cloud infrastructure. You will have made design choices and implemented security capabilities for Network Design (IDS/IPS), Secure Access (Okta + AWS IAM), or Security Monitoring amongst others, for a variety of Operating Systems and different environments.  
• Cloud security, and cloud native security capabilities. You will be working closely with the Platform team and IT team to incorporate security best practices, process, and capabilities into our cloud infrastructure and applications.
• Experience and opinions with infrastructure as code. You will be working with our Platform Engineering team to harden and secure our infrastructure as code repositories and ensure security best practices are followed.
• Experience working with developers throughout the software development lifecycle to ensure Security by Design.
• Represent Information Security in working with Architects and Engineers to plan, and execute joint initiatives to make our product and platform more secure, while maintaining velocity.
• Mature the vulnerability management and bug bounty program for Included Health. You will also help research the potential impact of recently disclosed vulnerabilities, and assess criticality of findings to drive remediation with our engineering business partners.
• Team player, influencer, and growth mindset to help drive out of the box solutions.
• Excellent communication skills to clearly communicate security recommendations, decisions, and to build and maintain security relationships across the enterprise.

Want more jobs like this?

Get Software Engineering jobs that are Remote delivered to your inbox every week.

Get Jobs

Send me The Muse newsletters for the best in career advice and job search tips.

By signing up, you agree to our Terms of Service & Privacy Policy.

Qualifications:

• Bachelor’s Degree in Computer Science or a related field and 3 years experience in Information Security
• CISSP, CCSK, or CCSP certifications
• Experience working with common security vendors for an AWS stack, and with cloud native AWS security capabilities
• Code comprehension in one or more languages (Java, Python, Ruby, C++ etc.)