Information Security Engineer

Sinclair Broadcast Group•Hunt Valley, MD

9d•$105,000 - $135,000

About The Position

Sinclair is seeking a detail-oriented Information Security Engineer to support its Information Security program, with a focus on enterprise vulnerability management. The role applies defense-in-depth principles to reduce vulnerability risk across business units, cloud environments, and infrastructure. The engineer partners with internal stakeholders, security operations and engineering teams, vendors, and consultants to protect sensitive data and drive enterprise-wide risk reduction. The position manages and advances vulnerability management, application security, CIS benchmark, and related security services. It includes identifying and prioritizing risks in on-premises and hybrid or multi-cloud environments; configuring security tools; coordinating remediation; mapping business-critical systems and data; and producing program metrics. The engineer also improves processes, documents and implements risk-analysis procedures, tracks program progress, and researches technologies that may enhance vulnerability management and application security.

Requirements

Associate’s degree in an IT discipline, equivalent work experience, or equivalent IT certifications.
At least 3 years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve programmatic success.
At least 4 years of experience taking ownership of projects, enhancements, or other assignments and seeing them through to completion.
Experience with Amazon Web Services, Azure, and Google Cloud Platform.
Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
Hands-on experience using vulnerability scanning tools and driving remediation at enterprise scale, such as Qualys, Tanium, or Bitsight.
Experience using asset management and reporting platforms.
Experience creating weekly metrics for vulnerability and risk-reduction reporting.
Familiarity with security industry standards such as ISO 27001 and the NIST 800-53 series, and with implementing control frameworks.
Working knowledge of network and/or security technologies.
Ability to think strategically, plan methodically, and execute tactically.
Other requirements as needed.
Must not require visa sponsorship; the position is not eligible for employer sponsorship, including H-1B or OPT-STEM employment.

Nice To Haves

Professional-level security certifications, such as Security+, Network+, CISSP, CEH, or CISM.

Responsibilities

Manage processes and solutions related to vulnerability management, application security, CIS benchmarks, and other security services.
Lead initiatives to develop and mature vulnerability management services in support of team and organizational goals.
Advocate for Information Security objectives and identify practical solutions that keep initiatives moving forward.
Drive remediation by understanding the impact of findings and developing communication channels with key stakeholders.
Identify, prioritize, communicate, and mitigate security risks across on-premises and hybrid or multi-cloud environments.
Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability management program.
Identify business-critical systems and map data types across enterprise assets, databases, cloud environments, and applications.
Work with vendors and consultants to identify tools that meet or exceed department needs.
Enforce compliance with company policies and standards.
Drive remediation related to application DAST scans, security assessments, vulnerability scans, and risk management activities and tools.
Configure and tune security tools to identify weaknesses in systems, applications, databases, and cloud environments.
Develop and evaluate performance metrics to assess process success.
Design, document, and implement procedures and techniques for analyzing and evaluating software and business risk, accuracy, completeness, internal integrity and consistency, testability, and overall system quality.
Research emerging technologies and identify opportunities for adoption in vulnerability management and application security.
Track vulnerability management process progress and continually identify ways to improve efficiency and effectiveness.
Collaborate on and adhere to security engineering standards, methodologies, and sustainable processes.
Maintain knowledge of current trends, publications, and emerging technologies relevant to risk and vulnerability management.
Take ownership of professional development and training needed to excel in the role.
Communicate and collaborate professionally with company stakeholders and business partners.
Use sound judgment to identify and solve problems in alignment with team and corporate goals.