Infrastructure Security Engineer II

Randstad Digital Americas; Anchor Point (AK); Remote; USD 56,000 - 70,000; Part time

Job summary

Randstad Digital Americas seeks an Infrastructure Security Engineer II for an immediate contract role. Telecommute option with hourly pay $40.76–$50.76.

The SPE Team focuses on engineering, operating, and improving security platforms and data pipelines to enable scalable exposure management across the enterprise. Responsibilities include exposure triage, evidence-based prioritization, and collaboration with vulnerability management and cloud/platform teams to deliver context-rich outputs.

Qualifications

• Bachelors degree or equivalent in a relevant field required.
• Experience in infrastructure security engineering or a closely related role.
• Strong analytical and communication skills; ability to work independently.

Responsibilities

• Validate exposure reachability and applicability using telemetry and context.
• Curate evidence to support exposure accuracy, impact, and prioritization.
• Enrich findings with business context and attack-path analysis.
• Normalize outputs for remediation workflows and risk acceptance.
• Reduce false positives and duplicates through correlation and validation.

Skills

Security

Exposure management

Risk analysis

Cross-functional communication

Education

Bachelor's degree

Tools

Tenable

Wiz

Armis AMS

VIPR

Zafran

Job description

Job Summary

Enterprise Healthcare client has an immediate opening for a highly motivated Infrastructure Security Engineer II to join their dynamic and growing team.

location: Telecommute

job type: Contract

salary: $40.76 - 50.76 per hour

work hours: 8am to 5pm

education: Bachelors

Responsibilities

• What is the purpose of this team?
• What is driving this need? (ex. Backfill for FTE or CW, new project, business growth)
• Describe the surrounding team (team culture, work environment, etc.) & key projects.
• Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? - The mission of the Secure Posture Engineering (SPE) Team is to engineer, operate, and continuously improve security platforms, tooling, data pipelines, and validation capabilities that enable accurate, scalable, and actionable exposure management across the enterprise. SPE continuously identifies what exists, what is exposed, and what truly matters, then supports remediation through evidence-based prioritization. The focus is on exposures that are reachable, applicable, and exploitable in our environment, ensuring teams spend time fixing the risks that reduce maximum business impact.
• Contractor support is requested to absorb foundational engineering and operational work, enabling senior engineers to focus on higher-value security initiatives, complex technical challenges, and critical risk reduction efforts. This investment will accelerate program delivery, improve operational maturity, reduce backlog pressure, and create an opportunity to identify and recruit high-performing talent through a contract-to-hire model.
• High-performing Team in a positive, collaborative environment where people feel trusted, valued, and appreciated. Key projects: Attack Surface Management - Cloud (Wiz) & On Prem (Tenable), external asset inventory discovery and exposure; Asset, exposure and posture correlation, normalization and prioritization across Cloud & On Prem (Armis AMS / VIPR and Zafran); Secure configuration baseline compliance measurement and drift across Cloud (Wiz) and On Prem (Tenable) environments.
• No additional hiring needs beyond these 2 positions.

Typical Day in the Role

• Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).
• What are the performance expectations/metrics?
• What makes this role unique? - Day-to-Day responsibilities (ASM Engineer) Tenable & Wiz:
• Responsible for execution of exposure triage within Secure Posture Engineering, ensuring findings are validated for reachability and applicability, enriched with business and attack-path context, and prepared as high-confidence outputs for existing downstream workflow routing and remediation.

Key Responsibilities

• Validate exposure reachability and applicability using available telemetry, configuration data, and environmental context
• Curate and assemble evidence to support exposure accuracy, impact, and prioritization decisions
• Enrich findings with business context, asset criticality, and attack-path analysis to improve risk clarity
• Normalize and prepare triaged outputs for routing into remediation, exception, or risk acceptance workflows
• Reduce false positives and duplicate findings through correlation, deduplication, and validation processes
• Partner with vulnerability management, cloud, application, and platform teams to ensure actionable and context-rich outputs
• Continuously improve triage methodologies, enrichment techniques, and signal quality

• Performance Expectations/Metrics:
• Increased visibility into the enterprise internet-facing footprint, including unknown, unmanaged, and atypical assets introducing measurable exposure
• Reduced time from discovery and validation of material exposures to workflow publication in ServiceNow for ownership attribution and remediation tracking
• Reduction in critical and exploitable exposures through evidence-based prioritization aligned to reachability, exploit likelihood, and business impact
• Improved quality and consistency of normalized finding data, including evidence completeness, asset mapping accuracy, and reduced duplicate or unstable records
• Improved control effectiveness through continuous validation of preventive and detective controls against priority threats and techniques
• Demonstrated reduction in exposure windows for high-risk findings and improved transparency into risk burn-down and closure progress
• What makes this role unique?
• Building a comprehensive program to discover, assess and communicate internet exposed assets across both the Cloud and On Prem environments. This role is the bridge between detecting security issues and enabling the enterprise to act on the right risks quickly, consistently, and at scale.

Qualifications

Bachelors

Skills

Agile,CompTIA Security+,Security+,networking technologies,CIAM,data analysis,IT General Controls,Enterprise IT,computer science,Excel,Microsoft Visio,SCRUM,shell scripts,software development methodologies,SDLC,strong analytical and critical thinking,attention to detail,critical thinking,sound judgment,decision-making,Soft Skills,Ability to work independently,independently,CISM,CISSP,cross-functional communication,CompTIA Security+ Certification,Security+,Encryption,cybersecurity certification,collect data,establish facts,infrastructure security,Baseline security,mathematics,statistics,National Institute of Standards and Technology (NIST),process modeling,risk identification,security risk assessments,Risk,Standardization,technical analysis,hard skills

Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.

At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact [e-mail].

Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).

This posting is open for thirty (30) days.

It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.