Senior IT Security Architect & Risk Leader

Quest Diagnostics Incorporated; Secaucus (NJ); Hybrid; USD 160,000 - 170,000; Full time

Benefits offered by this job

Day 1 Medical & dental

401(k) with company match

Annual incentive programs

Education assistance

Job summary

Quest Diagnostics Incorporated seeks a Senior IT Security Engineer to champion security governance and risk management across global infrastructure. You will bridge technical execution and executive governance, reporting to senior leadership and the CIO on risk posture, metrics, and SLA adherence.

You will lead vulnerability and asset lifecycle programs, collaborate with Firewall and Infrastructure teams, and drive remediation of confirmed risks while supporting after-hours incidents as needed.

Qualifications

• Minimum 10 years' experience with IT security program implementation and support.
• This includes security design, threat/vulnerability management, data protection, and incident response.
• Experience in application security development, testing and assessments, and security management.

Responsibilities

• Develops and enforces IT security strategies and risk controls for Quest Diagnostics.
• Advise on security tools across network, application, and data protection domains.
• Lead security reviews, SRB/VC governance, and effectiveness reporting.

Skills

Leadership

Communication

Problem Solving

Risk management

Security governance

Threat & vulnerability management

Security design & engineering

Incident response

Education

Bachelor's degree (B.A./B.S.)

Master's degree (preferred)

Tools

SIEM

Vulnerability scanning tools

Firewall management

Job description

Quest Diagnostics Incorporated seeks a Senior IT Security Engineer to champion security governance and risk management across global infrastructure. You will bridge technical execution and executive governance, reporting to senior leadership and the CIO on risk posture, metrics, and SLA adherence.

You will lead vulnerability and asset lifecycle programs, collaborate with Firewall and Infrastructure teams, and drive remediation of confirmed risks while supporting after-hours incidents as needed.