Information Security Engineer

Sinclair Broadcast Group•Hunt Valley, MD

8d•$105,000 - $135,000

About The Position

Sinclair is seeking a detail-oriented Information Security Engineer to support its enterprise Vulnerability Management program. The role applies defense-in-depth principles to reduce vulnerability risk across business units, cloud services, and infrastructure. The engineer partners with internal stakeholders, security operations and engineering teams, consultants, and vendors to develop security solutions that protect sensitive data and advance enterprise risk reduction. The position manages and improves vulnerability management, application security, CIS benchmarks, and related security services. It identifies, prioritizes, communicates, and mitigates risk across on-premises and hybrid or multicloud environments; supports remediation for application scans, security assessments, vulnerability scans, and risk-management activities; and configures and tunes security tools. The engineer also identifies critical systems and data, produces program metrics, enforces company security policies and standards, and develops sustainable procedures aligned with security best practices. The role includes researching emerging technologies, evaluating opportunities to improve vulnerability management and application security, tracking process outcomes, and collaborating on security engineering standards. Sinclair states that this position is not eligible for visa sponsorship, including H-1B employer sponsorship or OPT-STEM employment.

Requirements

Associate’s degree in an IT discipline, equivalent work experience, or equivalent IT certifications.
At least 3 years of experience with vulnerability management, system and application scanning, coordinating remediation, and building partner relationships for program success.
At least 4 years of experience owning projects, enhancements, or other assignments through completion.
Experience with Amazon Web Services, Microsoft Azure, and Google Cloud Platform.
Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
Hands-on experience using vulnerability scanning tools and driving remediation at enterprise scale, such as Qualys, Tanium, or Bitsight.
Experience using asset management and reporting platforms.
Experience creating weekly metrics for vulnerability and risk-reduction reporting.
Familiarity with security industry standards and control-framework best practices, such as ISO 27001 and the NIST 800-53 series.
Working knowledge of network and/or security technologies.
Ability to communicate and collaborate effectively and professionally with stakeholders and business partners.

Nice To Haves

Professional-level security certifications, such as Security+, Network+, CISSP, CEH, or CISM.

Responsibilities

Manage processes and solutions for vulnerability management, application security, CIS benchmarks, and other security services as required.
Lead initiatives to develop and mature vulnerability management services in line with team and organizational goals.
Drive remediation by assessing the impact of findings and communicating with key stakeholders.
Identify, prioritize, communicate, and mitigate security risks in on-premises and hybrid or multicloud environments.
Produce frequent metrics to evaluate vulnerability program efficacy and effectiveness, including weekly vulnerability and risk-reduction reporting.
Identify business-critical systems and map data types across enterprise assets, databases, cloud environments, and applications.
Work with vendors and consultants to identify tools that meet or exceed department needs.
Enforce company policies and standards and apply sound judgment in solving problems aligned with team and corporate goals.
Drive remediation related to application (DAST) scans, security assessments, vulnerability scans, and risk-management activities and tools.
Configure and tune security tools to identify weaknesses in systems, applications, databases, and cloud environments.
Develop and evaluate performance metrics to measure process success.
Design, document, and implement procedures and techniques for analyzing and evaluating software and business risk, accuracy, completeness, integrity and consistency, testability, and overall system quality.
Research emerging technologies and identify opportunities to adopt them in vulnerability management and application security.
Track vulnerability management processes and identify ways to improve their speed and effectiveness.
Collaborate on and follow security engineering standards, methodologies, and sustainable processes.
Maintain knowledge of current trends, publications, and emerging risk and vulnerability management technologies.
Collaborate professionally with company stakeholders and business partners, and take ownership of relevant professional development and training.