Information Security Advisor

VulnU; Atlanta, Northern (GA, KY); Hybrid; USD 110,000 - 170,000; Full time

Benefits offered by this job

Hybrid work model

Job summary

Elevance Health is seeking an Information Security Advisor to support infrastructure security across major projects. The role requires in-office presence 1–2 days per week at the Atlanta location (740 W. Peachtree St NW, Atlanta, GA 30308) with hybrid flexibility.

Work hours are Monday–Friday, 8:00 am–5:00 pm, emphasizing collaboration and secure configurations. The candidate will run vulnerability assessments, manage secure configurations, and communicate remediation guidance to system owners,

Qualifications

• Bachelor's degree in Information Systems, Computer Science, or a related field.
• Five years of experience in related occupation(s), including three years in vulnerability management and CVSS.
• Experience with databases (SQL, Oracle, DB2) and cloud infrastructure.

Responsibilities

• Document SOPs and runbooks; maintain and update procedures.
• Validate data accuracy in reports.
• Create process flows and metrics for internal review.
• Run vulnerability scans on databases before production.
• Administer vulnerability scanning for on-premise and cloud assets.
• Analyze vulnerabilities and identify remediation opportunities.
• Perform CVSS-based risk assessments using Qualys, Guardium, Prisma.
• Communicate remediation guidance to system owners.
• Collaborate with Cloud Security Engineering and application teams.
• Report cloud/container vulnerabilities and enable automation/integrations.
• Coordinate with Penetration Testing and App Security workflows.

Skills

Vulnerability management

CVSS

Cloud security

SQL/Oracle/DB2

SOC 2

PCI-DSS

HiTrust

Documentation

Education

Bachelor's degree in Information Systems/CS

Master's degree (alternate education)

Tools

Qualys

Guardium

Prisma

Job description

Position Title:Information Security AdvisorJob Description:Information Security Advisor Location: Ideal candidates will be able to report to our Pulse Point location at 740 W. Peachtree St NW, Atlanta, GA 30308.This role requires associates to be in-office 1 - 2 days per week, fostering collaboration and connectivity, while providing flexibility to support productivity and work-life balance. This approach combines structured office engagement with the autonomy of virtual work, promoting a dynamic and adaptable workplace. Please note that per our policy on hybrid/virtual work, candidates not within a reasonable commuting distance from the posting location(s) will not be considered for employment, unless an accommodation is granted as required by law. Work Hours: Monday to Friday, 8:00 am to 5:00 pm The Information Security Advisor is responsible for representing infrastructure security support in significant projects and performing the most complex operations and administration tasks. How You Will Make an Impact: Document standard operating procedures (SOP), maintain and update runbook.Validate report data to ensure accuracy.Create process flows and metrics for internal review.Run vulnerability scans on databases before releasing to production to eliminate potential vulnerabilities and validate proper controls are in place.Administer vulnerability and secure configuration scanning for databases and servers on premise and in the cloud.Analyze vulnerabilities with available exploits to identify opportunities to mitigate or remediate vulnerability exposure on impacted systems.Administer vulnerability risk assessment methodology based on Common Vulnerability Scoring System (CVSS) utilizing Qualys, Guardium and Prisma vulnerability assessment technologies.Communicate with system owners to help support remediation of identified vulnerabilities.Work with Cloud Security Engineering/operations and application teams to provide remediation guidance and consultation for vulnerabilities/misconfigurations.Vulnerability Risk assessment for Cloud Environments.Reporting and communication for cloud/container vulnerabilities, including automation and integrations.Cross collaboration for vulnerability remediation support with Penetration Testing and Application Security workflows. Minimum Requirements:Bachelor's degree in Information Systems, Computer Science, or a related field of study.Five (5) years of experience in related occupation(s). Experience Requirements:Five (5) years of experience in related occupation(s) must include:Three (3) years of experience in all of the following: Administration of database vulnerability management assessment tools;Performance of vulnerability assessment utilizing the Common Vulnerability Scoring System (CVSS);Administration of database technologies including SQL, Oracle, and DB2;Operating and administering infrastructure or applications with Cloud environments; andExecuting activities in alignment with compliance and contractual requirements;AICPA SOC 2;Payment Card Industry Data Security Standard (PCI-DSS); andHiTrust. Alternate Education:Employer will accept a Master's degree in Information Systems, Computer Science, or a related field of study andThree (3) years of experience in related occupation(s). Must have skills listed above. APPLY: https://careers.elevancehealth.com/Job Level:Non-Management ExemptWorkshift:Job Family:IFT > IT Security & CompliancePlease be advised that Elevance Health only accepts resumes for compensation from agencies that have a signed agreement with Elevance Health. Any unsolicited resumes, including those submitted to hiring managers, are deemed to be the property of Elevance Health.Who We AreElevance Health is a health company dedicated to improving lives and communities – and making healthcare simpler. We are a Fortune 25 company with a longstanding history in the healthcare industry, looking for leaders at all levels of the organization who are passionate about making an impact on our members and the communities we serve.How We WorkAt Elevance Health, we are creating a culture that is designed to advance our strategy but will also lead to personal and professional growth for our associates. Our values and behaviors are the root of our culture. They are how we achieve our strategy, power our business outcomes and drive our shared success - for our consumers, our associates, our communities and our business.We offer a range of market-competitive total rewards that include merit increases, paid holidays, Paid Time Off, and incentive bonus programs (unless covered by a collective bargaining agreement), medical, dental, vision, short and long term disability benefits, 401(k) match, stock purchase plan, life insurance, wellness programs and financial education resources, to name a few.Elevance Health operates in a Hybrid Workforce Strategy. Unless specified as primarily virtual by the hiring manager, associates are required to work at an Elevance Health location at least once per week, and potentially several times per week. Specific requirements and expectations for time onsite will be discussed as part of the hiring process.The health of our associates and communities is a top priority for Elevance Health. We require all new candidates in certain patient/member-facing roles to become vaccinated against COVID-19 and Influenza. If you are not vaccinated, your offer will be rescinded unless you provide an acceptable explanation. Elevance Health will also follow all relevant federal, state and local laws.Elevance Health is an Equal Employment Opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, citizenship status, color, creed, disability, ethnicity, genetic information, gender (including gender identity and gender expression), marital status, national origin, race, religion, sex, sexual orientation, veteran status or any other status or condition protected by applicable federal, state, or local laws. Applicants who require accommodation to participate in the job application process should submit the following form: Accessibility Accommodation Request Form and a member of the team will be in contact. Qualified applicants with arrest or conviction records will be considered for employment in accordance with all federal, state, and local laws, including, but not limited to, the Los Angeles County Fair Chance Ordinance and the California Fair Chance Act.Prospective employees required to be screened under Florida law should review the education and awareness resources at HB531 | Florida Agency for Health Care Administration.NOTE: Workday keeps job postings active through 11:59:59 PM on the day before the listed end date. Example: If the end date is 3/13, the posting will automatically come down on 3/12 at 11:59:59 PM. In other words — the job is posted until 3/13, not through 3/13.