Information Security Engineer

Sinclair Broadcast Group; Cockeysville (MD); On-site; USD 105,000 - 135,000; Full time

Benefits offered by this job

Retirement plan

Health, dental and vision insurance

Life and disability insurance

Flexible spending accounts

Sick leave, vacation, personal time

Parental leave

Employee stock purchase plan

Job summary

Sinclair Broadcast Group is seeking an Information Security Engineer focused on vulnerability management to support an enterprise program across on-prem, cloud, and hybrid environments.

You will collaborate with security operations and engineering to drive risk reduction, develop security solutions, and implement remediation across diverse assets. Strong communication and strategic thinking are essential for success.

Qualifications

• Associate's degree in IT discipline, equivalent work experience, or equivalent IT certifications.
• Hands-on experience with vulnerability management and remediation at enterprise scale.
• Experience with cloud platforms and security controls across OS, cloud, DB, and apps.
• Professional security certifications preferred (e.g., Security+, CISSP, CEH, CISM).

Responsibilities

• Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services as required.
• Excellent communication skills with an ability to collaborate with company stakeholders and business partners.
• Ability to think strategically, plan methodically, and execute tactically.
• Take ownership of professional development and training needed to excel in your role.
• Lead initiatives to develop and mature vulnerability management services as they apply to team and organizational goals.
• Act as an advocate for Information Security objectives while identifying creative solutions to ensure progress is made.
• Drive remediation activities by understanding the impact of findings and developing communication channels with key stakeholders.
• Identify, prioritize, communicate, and mitigate security risks for on-premises and hybrid/multi-cloud environments.
• Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program.
• Identify business critical systems and environments including mapping data types in enterprise assets, databases, cloud environments, and applications.
• Work with outside vendors and consultants to identify tools to meet or exceed department needs.
• Demonstrate good judgment in identifying and solving problems that aligns with team and corporate goals.
• Enforce compliance with company policies and standards.
• Contribute to the vulnerability management program by driving remediation activities pertaining to application (DAST) scans, security assessments, vulnerability scans, or risk management activities and tools.

Skills

Vulnerability management

System and application scanning

Remediation coordination

Stakeholder collaboration

Cloud environments (AWS, Azure, GCP)

Security controls (OS/Cloud/DB/App)

Security tooling & scanners

Asset management & reporting platforms

Security certifications (preferred)

Education

Associate's degree in IT or equivalent

Security certifications (Security+, CISSP, CEH, CISM)

Tools

Qualys

Tanium

Bitsight

Asset Management Platforms

Reporting Platforms

Job description

We are looking for a detail-oriented individual to drive quality-related security work for Sinclair's Information Security program. You will fill the role of Information Security Engineer with a focus on supporting an enterprise Vulnerability Management program. You will apply security in-depth principles to reduce vulnerability risk for Sinclair's business units, cloud, and infrastructure environments. You will partner with internal stakeholders and consultants to develop security solutions to protect the confidentiality and integrity of Sinclair's sensitive data. You will also work closely with security operations, engineering, to drive risk reduction across Sinclair's enterprise.

Responsibilities:

Processes & Execution

• Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services as required.
• Excellent communication skills with an ability to effectively and professionally collaborate with company stakeholders and business partners.
• Ability to think strategically, plan methodically, and execute tactically.
• Take ownership of professional development and training needed to excel in your role.
• Lead initiatives to develop and mature vulnerability management services as they apply to team and organizational goals.
• Act as an advocate for Information Security objectives while identifying creative solutions to ensure progress is made.
• Drive remediation activities by understanding the impact of findings and developing communication channels with key stakeholders.

Engineering, Collaboration & Partnerships

• Maintain knowledge of current trends, recent publications, and emerging technologies as they pertain to risk and vulnerability management.
• Identify, prioritize, communicate, and mitigate security risks for on-premises and hybrid/multi-cloud environments.
• Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program.
• Identify business critical systems and environments including mapping data types in enterprise assets, databases, cloud environments, and applications.
• Work with outside vendors and consultants to identify tools to meet or exceed department needs.
• Demonstrate good judgment in identifying and solving problems that aligns with team and corporate goals.
• Enforce compliance with company policies and standards.
• Contribute to the vulnerability management program by driving remediation activities pertaining to application (DAST) scans, security assessments, vulnerability scans, or risk management activities and tools.
• Configure and tune security tools to identify weaknesses in systems, applications, databases, and cloud environments.

Performance Improvement

• Help the security team to maintain a level of excellence.
• Develop and evaluate performance metrics to establish process success.
• Design, document, and implement procedures and techniques that are consistent with best practices for analyzing and evaluating the risk (software & business), accuracy, completeness, internal integrity/consistency, testability, and overall quality of the system.
• Research emerging technologies and identify opportunities for adoption within vulnerability management and application security.
• Track progress for vulnerability management related processes, and constantly look for ways to make things work better, faster, and smoother.
• Collaborate on and adhere to security engineering standards, methodologies, and sustainable processes.

Qualifications:

• Associate's degree in IT discipline, equivalent work experience, or equivalent IT certifications.
• 3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve programmatic success.
• 4+ years of experience taking ownership of project, enhancement, or other assignments and seeing the process through to completion.
• Experience with all the main cloud vendors (Amazon Web Service, Azure, Google Cloud Platform)
• Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
• Hands of experience using vulnerability scanning tools and driving remediation at an enterprise level (Qualys, Tanium, Bitsight, etc.).
• Experience using Asset Management and Reporting Platforms.
• Experience creating weekly metrics for vulnerability and risk reduction reporting.
• Professional level security certifications preferred (e.g., Security+, Network+, CISSP, CEH, CISM)
• Familiarity with security industry standards (ISO 27001, NIST 800-53 series, etc.) and best practices to implement control frameworks.
• Working knowledge of network and/or security technologies
• Other requirements as needed.

Please note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.

The base salary compensation range for this role is $105,000 to $135,000. Final compensation for this role will be determined by various factors such as a candidates' relevant work experience, skills, certifications, and geographic location. Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, sick leave, vacation time, personal time, parental leave and employee stock purchase plan.

Sinclair is proud to be an equal opportunity employer and a drug free workplace. Employment practices will not be influenced or affected by virtue of an applicant's or employee's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, military or veteran status or any other characteristic protected by law.

About Sinclair:

Sinclair, Inc. (Nasdaq: SBGI) is a diversified media company and a leading provider of local news and sports. The Company owns, operates and/or provides services to 177 television stations in 79 markets affiliated with all major broadcast networks; owns Tennis Channel, the premium destination for tennis enthusiasts; and multicast networks CHARGE, Comet, ROAR and The Nest. Sinclair's AMP Media produces a growing portfolio of digital content and original podcasts. Additional information about Sinclair can be found at www.sbgi.net.

About the Team

The life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open-door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let's talk.