Senior Infra Security Engineer: Attack Surface & BAS

Centene Corporation; Town of Florida (NY); Hybrid; USD 87,000 - 161,000; Full time

Benefits offered by this job

Health insurance

401K and stock plans

Tuition reimbursement

Paid time off

Job summary

Centene Corporation is seeking a Senior Infrastructure Security Engineer to operate and mature ASM and BAS programs across hybrid, cloud, on‑premises, and enterprise environments. You will validate ownership, assess security coverage, coordinate remediation, and produce actionable reporting.

Collaborate with security, infrastructure, cloud, risk, compliance, and business teams to reduce exposure, validate defensive controls, and support security program operations.

Qualifications

• Bachelor's degree in a quantitative or business field and 4–6 years of related experience.
• Equivalent experience through accomplishments relevant to the role.
• Experience with application security, SSDLC, and risk assessment.

Responsibilities

• Operate and mature ASM and BAS programs across hybrid, cloud, and on‑prem environments.
• Validate ownership, assess security coverage, and coordinate remediation.
• Audit configurations and monitor security alerts/vulnerabilities.
• Create security documents, SOPs, and reports; drive closure with stakeholders.
• Automate routine tasks and design self‑service options for security processes.

Skills

Attack Surface Management

Breach Attack Simulation

Asset visibility

Reporting & collaboration

SSDLC

Education

Bachelor's degree in a quantitative or business field

Tools

Tenable

Wiz

Armis Centrix

Armis VIPR

ServiceNow

Microsoft 365

SharePoint

Power BI

Jira

Job description

Centene Corporation is seeking a Senior Infrastructure Security Engineer to operate and mature ASM and BAS programs across hybrid, cloud, on‑premises, and enterprise environments. You will validate ownership, assess security coverage, coordinate remediation, and produce actionable reporting.

Collaborate with security, infrastructure, cloud, risk, compliance, and business teams to reduce exposure, validate defensive controls, and support security program operations.