Information Security Engineer

MGIC; Milwaukee (WI); On-site; USD 86,000 - 142,000; Full time

Benefits offered by this job

Competitive salary

401k with company match

On-site Fitness Center

Paid time off

Company holidays

Job summary

MGIC is strengthening its information security program and seeking a seasoned professional to lead vulnerability management, threat monitoring, and risk mitigation activities. This role requires strong analytical skills and the ability to translate security data into actionable controls.

You will contribute to security architecture, incident response support, and enterprise-wide security initiatives, with 24/7 availability as needed. Milwaukee-area candidates preferred.

Qualifications

• 3+ years of experience in information security, risk management or related fields.
• Bachelor's degree in Computer Science, Computer Security or Information Assurance required.
• Additional years of related work experience (2) or equivalent hands-on experience may be considered in lieu of degree.

Responsibilities

• Supports security system administration, vulnerability management and threat monitoring.
• Performs risk and security control assessments and recommends remedial actions.
• Develops and maintains security architecture, plans and procedures across project lifecycles.
• Provides security guidance to grow and evolve MGIC's Vulnerability Management Program.
• Participates in disaster recovery and business continuity planning and enterprise security projects.

Education

Bachelor's Degree in Computer Science, Computer Security or Information Assurance

Tools

Snyk

Rapid7

Job description

At MGIC, we take pride in knowing that what we do matters. As pioneers of private mortgage insurance, we help people achieve homeownership sooner - making affordable low-down-payment mortgages a reality. Our efforts have helped more than 14 million people get the keys to their own homes sooner than otherwise possible. Every position is critical to our company's success - from the analytical to the technical; from the innovative to the operational. The customer-facing roles to behind-the-scenes experts, we're all part of one team. We're an organization with a national footprint that's large enough to never lack for a new challenge, but small enough for an opportunity to make an impact and influence decisions. Come make a difference at MGIC.PURPOSEResponsible for executing the existing program while transforming and building a world class compliance and proactive security-focused Information Security program. Responsible for MGIC’s vulnerability information, intelligence, and risk mitigation collection, analysis, dissemination of information, and enforcement.PRIMARY DUTIES AND RESPONSIBILITIESThe following statements describe the general nature of work performed by people assigned to this job, may not be performed by all individuals in this job, and are not a complete list of all job duties required.Supports all aspects of security system administration, vulnerability management, security systems and threat monitoring, and conducting day to day operations including all tiers of security support.Performs regular risk and security control assessments, analyze effectiveness, identify risk and control weaknesses and recommend remedial action.Applies critical and analytical thinking and techniques against security data and events to drive, evolve and advance security monitoring and threat detection and response.Develops, documents and maintains security architecture and plans, processes, procedures, including strategic, tactical and project plans to ensure that security issues are addressed throughout the project and system life cycle.Provides technical authority, vision, documentation of operational procedures and guidance to grow, manage, run and evolve the MGIC Vulnerability Management Program.Participates in initial discussions of new platforms, applications, and/or any significant addition to MGIC's information systems. Provides input in developing long- and short-term plans for providing necessary security design, controls and/or technologies.Participates in corporate disaster recover/business continuity planning team. Provides security representation on large enterprise projects.Creates and consolidates vulnerability status reporting from disparate sources, security incident and event data, unresolved network security exposures, misuse of information assets, noncompliance audit remediation to produce weekly and monthly exception and management reports.Researches and explores new security threats, vulnerability trends, alerts and recommends and implements remedial monitoring and actions.Develops, implements, and manages the overall enterprise information security strategy and associated architecture, solutions, policies, standards and guidelines.Provides support to the Computer Incident Response Team (CIRT) in the effective detection, analysis, and containment of attacks.Nature of business environment requires 24/7 availability.PREFERENCESExperience with Snyk and Rapid 7QUALIFICATIONS3+ years of experienceEducation: Completion of a Bachelor’s Degree in Computer Science, Computer Security or Information Assurance. Additional years of related work experience (2) or equivalent hands-on experience.Pay Range:$86,070.00 - $142,020.00This range aligns with current market data and reflects our commitment to competitive and equitable compensation. Salary offers are based on factors such as experience, skills, education, and training. The range may vary in certain locations to reflect local market conditions. It is not typical to initiate pay at the top of the range to account for internal equity and allow for future and continued salary growthEnjoy these benefits from day one:• Competitive Salary & pay-for-performance bonus• Financial Benefits (401k with company match, profit sharing, HSA, wellness program)• On-site Fitness Center and classes (corporate office)• Paid-time off and paid company holidays• Business casual dressFor additional information about MGIC and to apply, please visit our website at www.mgic.com/careers.Note to all recruitment agencies:MGIC does not accept unsolicited agency resumes. Any unsolicited resumes sent to MGIC, directly or indirectly, will be considered MGIC property. MGIC is not responsible for any agency fees associated with unsolicited resumes. A recruiting agency must have a valid, written and fully executed agency agreement to assist with a requisition.