Senior Infrastructure Security Engineer

Centene Corporation•Remote-MO, MO

4d•$87,000 - $161,300

About The Position

The Senior Infrastructure Security Engineer operates and matures Centene’s Attack Surface Management (ASM) and Breach Attack Simulation (BAS) programs across hybrid, cloud, on-premises, and enterprise environments. The role strengthens security visibility and reduces risk by validating internet-facing assets, confirming ownership, assessing security coverage, maintaining accurate inventories, coordinating remediation, executing breach attack simulation exercises, validating control effectiveness, and producing actionable reporting. It partners with security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, validate defensive controls, and support effective security program operations. The posting also describes application security responsibilities, including maintaining security standards, analyzing architecture, auditing configurations, monitoring and remediating alerts and vulnerabilities, documenting findings and tracking them to closure, automating operational tasks, and implementing security solutions throughout the secure software development life cycle. The role undertakes initiatives and policies to review application security configurations, performs other duties as assigned, and complies with all policies and standards. A bachelor’s degree in a quantitative or business field and 4–6 years of related experience are required, or equivalent experience acquired through applicable knowledge, duties, scope, and skill. Candidates must be authorized to work in the United States without current or future employment-based visa sponsorship. Centene offers a comprehensive benefits package, and work schedules may be remote, hybrid, field, or office, depending on the arrangement.

Requirements

Bachelor’s degree in a quantitative or business field such as statistics, mathematics, engineering, or computer science, or equivalent experience acquired through applicable knowledge, duties, scope, and skill.
4–6 years of related experience.
Intermediate ability to acquire knowledge in area of specialty.
Intermediate ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions.
Ability to work independently.
Demonstrated analytical skills.
Demonstrated project management skills.
High level of accuracy, including under pressure.
Excellent judgment and decision-making skills.
Must be authorized to work in the U.S. without the need for current or future employment-based visa sponsorship.

Nice To Haves

Experience with Attack Surface Management and external asset discovery.
Experience with Breach Attack Simulation, adversary emulation, control validation, and security detection improvement.
Experience with asset inventory management, ownership validation, and security coverage assessment.
Experience with vulnerability management, remediation coordination, and ServiceNow workflow support.
Experience with security reporting, metrics development, process documentation, and cross-functional program coordination.
CompTIA Security+ certification preferred.

Responsibilities

Operate and mature Attack Surface Management and Breach Attack Simulation programs across hybrid, cloud, on-premises, and enterprise environments.
Validate internet-facing assets, confirm ownership, assess security coverage, and maintain accurate asset inventories.
Coordinate remediation activities and support vulnerability management workflows.
Execute breach attack simulation exercises and validate security control effectiveness.
Produce actionable security reporting and improve security visibility and risk reduction.
Partner with security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, and support security program operations.
Ensure implementation and maintenance of application security standards in accordance with industry best practices.
Analyze current application security architecture to identify critical deficiencies and recommend improvements.
Audit application security and operational configurations.
Monitor and remediate application security alerts and vulnerabilities, including malware, injection attacks, and unauthorized access.
Create application security documentation and standard operating procedures; report findings and track them to closure with relevant parties.
Automate routine application security operational tasks and design self-service options aligned with security standards.
Implement authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle.
Review application security configurations and generate recommendations through initiatives and policies.
Perform other duties as assigned and comply with all policies and standards.