Information Security Engineer

MGIC•Milwaukee, WI

7d•$86,070 - $142,020

About The Position

The Information Security Engineer executes MGIC’s existing information security program while helping transform and build a compliance-focused, proactive security program. The role collects, analyzes, and disseminates vulnerability information, intelligence, and risk mitigation guidance, and enforces security requirements. The position supports security system administration, vulnerability management, security and threat monitoring, risk and control assessments, security architecture, and day-to-day security operations across all tiers of support. It contributes to enterprise security strategy and architecture, project and system lifecycle planning, incident response, disaster recovery and business continuity planning, and security reporting. The nature of the business requires 24/7 availability.

Requirements

At least 3 years of experience.
Bachelor’s degree in Computer Science, Computer Security, or Information Assurance; alternatively, 2 additional years of related work experience or equivalent hands-on experience.

Nice To Haves

Experience with Snyk and Rapid7.

Responsibilities

Support security system administration, vulnerability management, security systems and threat monitoring, and day-to-day operations, including all tiers of security support.
Conduct regular risk and security control assessments, analyze their effectiveness, identify risks and control weaknesses, and recommend remedial actions.
Analyze security data and events to advance security monitoring, threat detection, and response.
Develop, document, and maintain security architecture, plans, processes, and procedures, including strategic, tactical, and project plans that address security throughout project and system lifecycles.
Provide technical authority, vision, operational documentation, and guidance to grow, manage, operate, and evolve MGIC’s Vulnerability Management Program.
Participate in initial discussions about new platforms, applications, and significant additions to MGIC information systems; provide input to short- and long-term security plans, designs, controls, and technologies.
Participate in the corporate disaster recovery and business continuity planning team and represent security on large enterprise projects.
Create and consolidate vulnerability status, security incident and event, unresolved network exposure, information asset misuse, and audit-remediation data into weekly and monthly exception and management reports.
Research security threats, vulnerability trends, and alerts, and recommend and implement remedial monitoring and actions.
Develop, implement, and manage the enterprise information security strategy and associated architecture, solutions, policies, standards, and guidelines.
Support the Computer Incident Response Team in detecting, analyzing, and containing attacks.