Sr. Information Systems Security Engineer

Sun Life Financial • Wellesley, MA

144d • $89,000 - $257,100 • Onsite

About The Position

The Sr Information Security Engineer will report to the Manager, Security Engineering. The Sr Information Security Engineer will be among a team of engineers responsible for security configurations and engineering for all information security systems, for on-premise and cloud-based security systems. This role will be responsible for the management and maintenance of all Information Security systems. These systems include: Security Data Loss Prevention, Identity and Access Management, Authentication Platforms, Advanced Malware and Anti-Virus, Web Filter, Proxy, SIEM (Security Incident Event Manager), File Integrity Monitoring, IPS/IDS, Database Activity Monitoring, Threat Intelligence, Secure Configuration Management, and Network Security along with the direct security configuration aspects of VCenter, Citrix, Windows Active Directory, Exchange, and any other Information Systems.

Requirements

• BS and the equivalent of 7 years working in Information Security or equivalent 10 years of work experience in a highly regulated environment, preferably in Healthcare or Fintech
• Experience working on an Agile team and familiarity with the Agile Scrum methodology and creation of user stories in Agile discipline
• Extensive experience with Identity and Access Management, Vulnerability Management, Database Security, Network Security, Active Directory, Patch Management, Web Application Firewalls, and Advanced Malware solutions
• Extensive working knowledge of configuring and managing Identity and Access Platforms, Firewalls, Switches, Routers, Network Sensors, Endpoint Controls, Server Controls, and Data Loss Prevention is required
• Security certifications preferred (CISSP, OSCP, CISM, GIAC) or with a requirement of obtaining within 12 months upon hire
• Knowledge of Python, Regex, PowerShell, SQL, JSON, and XML and at least some experience in an object-oriented programming language is desirable but not required
• Excellent verbal and written communication skills
• Effective organization, prioritization, negotiation and influencing skills

Responsibilities

• Lead configuration and implementation of all information security systems
• Manage all information security systems and ensure proactive patching levels
• Act as backup or lead Scrum Master for Security Engineering team as assigned by Security team leadership, creating user stories assigned to engineering and operations team members
• Configure and engineer all Endpoint Security controls
• Configure and engineer all Network Security controls
• Configure and engineer all Server Security controls
• Configure and engineer all Database Security controls
• Configure and engineer all identities and permissions and single sign-on for contractors and employees
• Develop peers and staff by providing direction, support, and mentoring in areas of expertise
• Other duties as needed or required.

Benefits

• Excellent benefits and wellness programs to support the three pillars of your well-being - mental, physical and financial
• Generous vacation and sick time
• Market-leading paid family, parental and adoption leave
• Partially-paid sabbatical program
• Medical plans
• Company paid life and AD&D insurance
• Disability programs
• 401(k) plan with an employer-paid match
• Employer-funded retirement account
• Flexible work environment with a friendly, caring, collaborative and inclusive culture

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Industry: Insurance Carriers and Related Activities
• Education Level: Bachelor's degree