Information Security Engineer

Mortgage Guaranty Insurance Corporation • Milwaukee, WI

6d

About The Position

At MGIC, the Information Security Engineer executes the existing information security program while helping transform and build a compliance-focused, proactive security program. The role is responsible for collecting, analyzing, disseminating, and enforcing vulnerability information, intelligence, and risk-mitigation measures.

The engineer supports security system administration, vulnerability management, security systems and threat monitoring, and day-to-day security operations across all tiers of support. The role assesses security risks and controls, analyzes security data and events to advance monitoring and threat detection and response, and develops and maintains security architecture, plans, processes, and procedures. It also provides technical leadership for MGIC’s Vulnerability Management Program and security representation across enterprise projects and disaster recovery/business continuity planning.

The position produces vulnerability and security exception and management reports, researches emerging threats and vulnerability trends, recommends and implements remediation and monitoring actions, and supports the Computer Incident Response Team in detecting, analyzing, and containing attacks. The nature of the business requires 24/7 availability.

Requirements

• At least 3 years of experience.
• Completion of a bachelor’s degree in Computer Science, Computer Security, or Information Assurance.
• Alternatively, additional related work experience (2 years) or equivalent hands-on experience.

Nice To Haves

• Experience with Snyk.
• Experience with Rapid 7.

Responsibilities

• Support security system administration, vulnerability management, security systems and threat monitoring, and day-to-day operations across all tiers of security support.
• Conduct regular risk and security control assessments, analyze effectiveness, identify risks and control weaknesses, and recommend remedial action.
• Analyze security data and events to advance security monitoring, threat detection, and response.
• Develop, document, and maintain security architecture, plans, processes, and procedures, including strategic, tactical, and project plans addressing security throughout project and system life cycles.
• Provide technical authority, vision, operational procedure documentation, and guidance for the MGIC Vulnerability Management Program.
• Participate in initial discussions concerning new platforms, applications, and significant additions to MGIC information systems.
• Provide input to long- and short-term plans for security design, controls, and technologies.
• Participate in the corporate disaster recovery/business continuity planning team.
• Represent security on large enterprise projects.
• Create and consolidate vulnerability status reporting from disparate sources, security incident and event data, unresolved network security exposures, misuse of information assets, and noncompliance audit remediation into weekly and monthly exception and management reports.
• Research security threats, vulnerability trends, and alerts; recommend and implement remedial monitoring and actions.
• Develop, implement, and manage the enterprise information security strategy and associated architecture, solutions, policies, standards, and guidelines.
• Support the Computer Incident Response Team in detecting, analyzing, and containing attacks.

Benefits

• Competitive salary and pay-for-performance bonus.
• 401(k) with company match.
• Profit sharing.
• Health Savings Account (HSA).
• Wellness program.
• On-site fitness center and classes at the corporate office.
• Paid time off.
• Paid company holidays.
• Business casual dress.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level