Remote IT Security & Vulnerability Engineer

New York State Insurance Fund (NYSIF); New York (NY); On-site; USD 65,000 - 90,000; Full time

Benefits offered by this job

Competitive compensation

Future career growth potential

Open team environment

Generous vacation and holidays

Health insurance

Job summary

New York State Insurance Fund (NYSIF) is seeking professionals to join the Vulnerability Management Team. You will help manage application and infrastructure vulnerabilities, review scans, report anomalies, and coordinate fixes with infrastructure and development groups.

The role involves administering on-prem Tenable, Black Duck, and Sonatype tools, supporting remediation efforts, and ensuring adherence to security standards. Ability to work with 55b/55c program and NY HELPS is noted.

Qualifications

• Good understanding of security fundamentals.
• Familiarity with Linux command-line.
• Understanding of security vulnerabilities, threat landscapes and mitigation techniques.

Responsibilities

• Review scan results and report anomalies.
• Investigate and troubleshoot vulnerabilities.
• Provide end-user support for vulnerabilities.
• Create, configure, schedule and monitor device security scans.
• Recertify scheduled scans for accuracy.
• Research emerging technologies and assist management with planning.
• Coordinate with infrastructure and development teams during maintenance and deployment.
• Enforce standards and best practices.
• Install, administer, test, and maintain on-premise security tools (Tenable, Black Duck, Sonatype).
• Evaluate risks and assist in implementing fixes.

Skills

Security fundamentals

Linux command-line

Vulnerability knowledge

Education

Bachelor’s degree incl. CS credits

Bachelor’s degree + 1 year IT

60 sem credits incl. CS + 1 year IT

2 years IT experience

Job description

New York State Insurance Fund (NYSIF) is seeking professionals to join the Vulnerability Management Team. You will help manage application and infrastructure vulnerabilities, review scans, report anomalies, and coordinate fixes with infrastructure and development groups.

The role involves administering on-prem Tenable, Black Duck, and Sonatype tools, supporting remediation efforts, and ensuring adherence to security standards. Ability to work with 55b/55c program and NY HELPS is noted.