Information Security Engineer

Hanover Insurance Group • Worcester, MA

392d • Remote

About The Position

The Hanover is seeking a highly skilled and motivated Information Security Engineer to join our Information Security team. This role is available in Worcester, MA; Windsor, CT; or through a remote work arrangement. As an Information Security Engineer, you will be responsible for identifying, analyzing, and mitigating security vulnerabilities within the infrastructure. You will work closely with the security team to ensure that systems and applications are secure and compliant with industry standards. Your role will involve conducting regular vulnerability assessments, analyzing security data, and driving vulnerability remediation.

Requirements

• 4-year/Bachelor's degree or equivalent work experience (4 years of experience in lieu of Bachelor's) (Minimum Required)
• 3+ years of IT Security experience, in areas such as security operations, incident analysis, incident handling, and vulnerability management or testing, log analysis, intrusion detection that directly relates to the responsibilities of this position. (required)
• Must be eligible to work in the US without requiring sponsorship now or in the future (ie. green card holder or US citizen)
• Familiarity with SLAs, metrics, and KPIs reporting.
• Strong problem-solving skills and attention to detail.
• Experience in managing security projects, including planning, execution, and monitoring.
• Strong organizational skills, and the ability to prioritize tasks effectively.
• Effectively communicate security concepts to non-technical stakeholders.
• Analyze large datasets to identify trends and anomalies related to vulnerability data.
• Validate vulnerability data for accuracy.
• Proven experience in procedure development and documentation.

Nice To Haves

• Experience with securing cloud environments (e.g., AWS, Azure, Google Cloud).
• Proficiency in conducting risk assessments and developing risk mitigation strategies.
• Proficiency in scripting languages (e.g., Python, Bash) for automating security tasks.
• Proven experience in creating and managing Power BI dashboards.
• Experience in application security, including secure coding and code review.
• Experience in configuration management and compliance monitoring.

Responsibilities

• Analyze and interpret vulnerability scan results to identify potential security risks.
• Collaborate with IT and security teams to remediate identified vulnerabilities.
• Monitor and track vulnerability remediation efforts, providing regular status updates.
• Develop and maintain documentation related to vulnerability management processes.
• Stay current with the latest security threats, vulnerabilities, and mitigation techniques.
• Assist in the development and implementation of security standards and procedures.
• Provide support during security incidents and investigations.
• Prepare detailed reports and presentations on vulnerability findings and remediation efforts.
• Utilize ServiceNow for tracking and managing tasks.
• Develop dashboards for continuous vulnerability monitoring.

Benefits

• Medical, dental, vision, life, and disability insurance
• 401K with a company match
• Tuition reimbursement
• PTO
• Company paid holidays
• Flexible work arrangements
• Cultural Awareness Day in support of IDE
• On-site medical/wellness center (Worcester only)

What This Job Offers

• Job Type: Full-time
• Career Level: Entry Level
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree
• Number of Employees: 5,001-10,000 employees