Associate Information Security Engineer (Hybrid to Worcester)

The Hanover Insurance Group; Massachusetts; On-site; USD 110,000 - 150,000; Full time

Benefits offered by this job

Medical, dental, vision

401K with company match

Tuition reimbursement

PTO

Flexible work arrangements

Job summary

The Hanover Insurance Group in Massachusetts seeks a cybersecurity engineer to join the InfoSec team and help build, maintain, and improve threat detection and response capabilities.

The role requires hands-on security tooling experience, Windows and Linux administration, scripting skills, and security certifications or plans to obtain them within 18 months. This is a full-time exempt position with on-site responsibilities.

Qualifications

• 4-year/Bachelor's degree or equivalent work experience.
• 1+ years IT Security experience in security operations, incident analysis/handling, vulnerability management or testing.
• Must be eligible to work in the US without sponsorship now or in the future.
• Hands-on experience with a variety of cybersecurity tools.
• Hands-on experience in a Windows and Linux environment.
• Demonstrated scripting experience (PowerShell, Perl, Python).
• Security certifications such as CISSP, CISM, Security+ or CEH, or plan to obtain within 18 months.

Responsibilities

• Builds, integrates, and supports information security solutions protecting corporate data.
• Collaborates with engineering, analysts and technicians to improve security posture.
• Assesses risks and recommends mitigations for projects and applications.
• Creates, tunes, and monitors correlation searches and alerts from diverse log sources.
• Delivers timely reports and findings to management and leadership.
• Contributes to security policy, standards, and system configuration improvements.

Skills

IT Security

PowerShell

Python

Perl

Windows

Linux

Vulnerability Mgmt

Education

Bachelor's degree or equivalent

Job description

For more than 170 years, The Hanover has been committed to delivering on our promises and being there when it matters the most. We live our values every day, demonstrating we CARE through our values, Sustainability initiatives and inclusive corporate culture.

POSITION OVERVIEW

This engineer will join a team responsible for building, maintaining, and improving the organization’s threat detection and response capabilities. This Engineer will collaborate within the InfoSec team and across partner business units to improve our cybersecurity posture.

A successful cybersecurity engineer is technically strong, communicates well, and is committed to building relationships to drive performance. Engineers are expected to work closely with engineers, analysts, and technicians, while consistently demonstrating behaviors aligned with our core values.

This is a full-time, exempt position.

IN THIS ROLE, YOU WILL HAVE

• Builds, integrates, and supports information security solutions supporting executive strategies and ensuring the security of the information The Hanover is entrusted to protect.
• Contributes to organizational initiatives within assigned area(s) of responsibility.
• Assesses operational business processes to ensure security is appropriately integrated.
• Assesses potential risks with applications and products and provides recommendations for risk mitigation to help the business succeed with their projects.
• Collaborates with networking team, architects, developers, and others to ensure security.
• Directly engages in troubleshooting and delivery with stakeholders, including end-users.
• Provides information security engineering support across the organization –including off-hours support and on-call rotations as appropriate.
• Ensures reports and findings are delivered in a timely and appropriate manner to management / leadership.
• Contributes to recommendations for new security policy, standards, best practices, and system configuration standards. Consults on security topics and policy interpretation.
• Identifies higher risk areas of the infrastructure and environmental landscape for assessment.
• Engages in coordination activities across multiple departments and business units.
• Maintains knowledge on current and emerging developments/trends for assigned area(s) of responsibility, assesses the impact, and collaborates with technical leadership and management to incorporate new trends and developments in current and future solutions.
• Implements process improvements to improve quality across the team, department and/or business unit for his/her assigned area(s) of responsibility.
• Executes independently and collaborates with team members and applicable internal/external stakeholders on assignments/projects for assigned area(s) of responsibility.
• Executes independently and collaborates with team members for assignments, projects, and/or initiatives to build and enhance the capability of assigned area(s) of responsibility.
• Creates, scripts, and maintains correlation searches and alerts leveraging diverse log sources and types
• Applies best practices for security logging and alerting to prevent and detect security incidents.
• Optimizes alerting and response techniques utilizing complex and/or machine learning, automation, and orchestration techniques.
• Analyzes security events within the Security Operations Center to research and address security incidents.
• Monitors and provides assurance of the overall health and effectiveness of prevention, detection, and response capabilities.
• Contributes to building and improving cybersecurity procedures and documentation
• Collaborates with cybersecurity engineering and cyber threat intelligence teams to implement and tune security tools used by InfoSec operations.
• Engages in knowledge sharing, training, and mentoring activities with information security team members.
• Executes certificate management.

WHAT YOU NEED TO APPLY

• 4-year/Bachelor's degree or equivalent work experience (4 years of experience in lieu of Bachelor's) (Minimum Required)
• 1+ years of IT Security experience, in areas such as security operations, incident analysis, incident handling, and vulnerability management or testing, log analysis, intrusion detection that directly relates to the responsibilities of this position. (required)
• Must be eligible to work in the US without requiring sponsorship now or in the future (i.e Lawful Permanent Residence or US Citizen)
• Hands-on experience with a variety of cybersecurity tools
• Hands-on experience in a Windows / Linux environment
• Hands-on experience with endpoint encryption, endpoint protection, anti-virus, security monitoring agents, vulnerability scanning, content analysis and filtering, data loss prevention.
• Demonstrated experience with scripting languages such as PowerShell, Perl, and Python
• Must have excellent trouble-shooting and problem-solving skills
• Demonstrated understanding of Security Fundamentals, General IT knowledge, Network Systems, Firewalls, IDS/IPS Systems, Windows & Linux Systems Administration, Windows/Linux and MAC operating systems, Desktop Engineering, Cloud Technologies, Databases, and Software Development
• Security certifications such as CISSP, CISM, CompTIA's Security+, CEH required or to be obtained within 18 months.
• Ability and commitment to communicate effectively, consistently chooses appropriate communication methods to ensure critical information reaches and persuades intended audience
• Strong team player. Uses strong interpersonal skills to build partnerships with stakeholders and peers
• Demonstrates a strong sense of accountability (ownership and commitment) toward achieving goals and tasks; making, meeting and communicating progress.

CAREER DEVELOPMENT

It’s not just a job, it’s a career, and we are here to support you every step of the way. We want you to be successful and fulfilled. Through on-the-job experiences, personalized coaching and our robust learning and development programs, we encourage you – at every level – to grow and develop.

BENEFITS

We offer comprehensive benefits to help you be healthy, build financial security, and balance work and home life. At The Hanover, you’ll enjoy what you do and have the support you need to succeed.

Benefits include:

• Medical, dental, vision, life, and disability insurance
• 401K with a company match
• Tuition reimbursement
• PTO
• Company paid holidaysFlexible work arrangements
• Cultural Awareness Day in support of IDE
• On-site medical/wellness center (Worcester only)

EEO statement

The Hanover values diversity in the workplace and among our customers. The company provides equal opportunity for employment and promotion to all qualified employees and applicants on the basis of experience, training, education, and ability to do the available work without regard to race, religion, color, age, sex/gender, sexual orientation, national origin, gender identity, disability, marital status, veteran status, genetic information, ancestry or any other status protected by law.

Furthermore, The Hanover Insurance Group is committed to providing an equal opportunity workplace that is free of discrimination and harassment based on national origin, race, color, religion, gender, ancestry, age, sexual orientation, gender identity, disability, marital status, veteran status, genetic information or any other status protected by law.”

As an equal opportunity employer, Hanover does not discriminate against qualified individuals with disabilities. Individuals with disabilities who wish to request a reasonable accommodation to participate in the job application or interview process, or to perform essential job functions, should contact us at:[e-mail] and include the link of the job posting in which you are interested.

Compensation

The target hiring range for this role may vary based on geographic location and other factors, including merit or performance, demonstrated proficiency, skills for the role, education, travel requirements, and experience. Additional compensation may include an annual bonus (which could take the form of a general bonus, sales incentive, or short-term incentive), long-term incentive or spot recognition awards. The posted range reflects our ability to hire at different position titles and levels depending on background and experience.