Senior Infrastructure Security Engineer

United States Digital Space LLC; United States; Hybrid; USD 87,000 - 161,000; Full time

Benefits offered by this job

Health insurance

401K & stock purchase

Tuition reimbursement

PTO & holidays

Flexible work arrangements

Job summary

United States Digital Space LLC seeks a Senior Infrastructure Security Engineer to operate and mature ASM and BAS programs across hybrid, cloud, on‑prem and enterprise environments. You will validate assets, ownership, coverage, and remediation, while producing actionable reporting for leadership.

The role collaborates with security, infrastructure, cloud, risk, and compliance teams to strengthen visibility and reduce exposure. Requires 4–6 years of relevant experience and US work authorization.

Qualifications

• Bachelor’s degree in statistics, engineering, CS or related field and 4–6 years of related experience.
• Experience with ASM/BAS programs and security controls is preferred.
• Strong ability to document findings and drive remediation with cross‑functional teams.

Responsibilities

• Operate and mature ASM and BAS programs across hybrid, cloud, and on‑prem environments.
• Validate internet-facing assets, ownership, and control coverage; produce reporting.
• Coordinate remediation activities and track to closure with stakeholders.
• Develop and maintain security documents and standard operating procedures.
• Automate routine security tasks and enable self‑service options.

Skills

Project management

Analytical skills

Independent work

Judgment & decision making

Attention to accuracy

Education

Bachelor's degree in quantitative or business field

Tools

Tenable

Wiz

Armis Centrix

Armis VIPR

ServiceNow

Microsoft 365

SharePoint

Power BI

Jira

Job description

Position Purpose:The Senior Infrastructure Security Engineer is responsible for operating and maturing the company’s Attack Surface Management (ASM) and Breach Attack Simulation (BAS) programs across hybrid, cloud, on-premises, and enterprise environments. This role strengthens security visibility and risk reduction by validating internet-facing assets, confirming ownership, assessing security coverage, maintaining inventory accuracy, coordinating remediation activities, executing breach attack simulation exercises, validating control effectiveness, and producing actionable reporting. The position partners across security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, validate defensive controls, and support effective security program operations.

Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT.

• Ensures the implementation and maintenance of application security standards as per industry best practices.
• Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement.
• Audits of application security and operational configurations.
• Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc.
• Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties.
• Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards.
• Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process.
• Undertakes initiatives/policies to review and generate recommendations for the application security configuration.
• Performs other duties as assigned.
• Complies with all policies and standards.

Education/Experience: A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience.

Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.

Technical Skills:

• Attack Surface Management: Tenable and Wiz.
• Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling.
• Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz.
• Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools.

Preferred Experience:

• Attack Surface Management and external asset discovery.
• Breach Attack Simulation, adversary emulation, control validation, and security detection improvement.
• Asset inventory management, ownership validation, and security coverage assessment.
• Vulnerability management, remediation coordination, and ServiceNow workflow support.
• Security reporting, metrics development, process documentation, and cross-functional program coordination.

Soft Skills:

• Intermediate - Seeks to acquire knowledge in area of specialty
• Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions
• Intermediate - Ability to work independently
• Intermediate - Demonstrated analytical skills
• Intermediate - Demonstrated project management skills
• Intermediate - Demonstrates a high level of accuracy, even under pressure
• Intermediate - Demonstrates excellent judgment and decision making skills

License/Certification: CompTIA Security+ Certification preferred.Pay Range: $87,000.00 - $161,300.00 per year

At the company, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday.

the company offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual's skills, experience, education, and other job-related factors permitted by law, including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility.

the company is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law.

Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act