Senior Technology Security Engineer

EMC Insurance Companies; United States; Remote; USD 115,000 - 164,000; Full time

Job summary

EMC Insurance Companies is seeking a Senior Technology Security Engineer to act as a security SME on complex enterprise projects, overseeing risk assessment, IAM, and governance. You will lead security design, deployment, and audits while collaborating with IT and security teams to meet architectural standards.

Ideal candidates have 8+ years in information security, relevant certifications, and preferred insurance industry experience.

Qualifications

• Bachelor’s degree in information security, IT, or related field or equivalent experience.
• Eight years in information security, IAM, or related roles; at least four in information security.
• Master’s degree or equivalent with six years of info security experience (optional).
• InfoSec certifications preferred (CISSP, CCSP, CCSK, AWS, Azure, Security+).
• Insurance industry experience is preferred.

Responsibilities

• Serve as information security SME on complex projects; assess risks and guide risk treatment.
• Lead design, deployment, and maintenance of security systems including IAM.
• Research and propose new security solutions with cost estimates and training needs.
• Coordinate audits, policy alignment, and reporting across stakeholders.

Skills

InfoSec concepts

IAM

Cloud security

Linux

Windows

Python

PowerShell

Audit readiness

Insurance industry experience

Education

Bachelor’s degree

Master’s degree

CISSP

CCSP

CCSOKR?

CCSK

AWS

Azure

Security+

CEH

GSEC

Tools

None

Job description

At EMC, we’re all about working together to make an impact. As part of our team, you’ll have the opportunity to grow, contribute, and gain experience that matters. We strive to be caring leaders, close partners, and responsive experts—always supporting each other to do our best work. Join us, and let’s improve lives together.

This position is eligible to work from home anywhere in the US

The Senior Technology Security Engineer serves as an information security subject matter expert on highly complex enterprise projects, software, and hardware enhancements. Identifies information security risks, provides recommendations, builds, and configures solutions, and troubleshoots issues. Identifies and documents of highly complex information technology risks, assesses risk levels, recommends risk treatment, coordinates risk acceptance and remediation, and ensures appropriate remediation occurs. Serves as security subject matter expert, collaborates with stakeholders, offers guidance, and serves as main security point of contact during project planning and implementation. Collects and provides documentation for internal and external audits and assessments. Oversees assigned security tools/services and vendor life cycle management.

Essential Functions:

• Serves as an information security subject matter expert on highly complex enterprise projects, software, and hardware enhancements. Identifies information security risks, provides recommendations, builds, and configures solutions, and troubleshoots issues. Collaborates with IT and security teams on project plans and meets with stakeholders to assess impacts and dependencies. Leads project activities to ensure timely deliverables and supports the establishment of a roadmap by evaluating and recommending new tools
• Leads highly complex information security projects across all security teams. Designs, builds, deploys, and maintains information security systems, including identity governance and access management solutions. Ensures the efficient operation of information security systems and resolves intricate security problems. Collaborates with other IT areas to plan for future needs
• Researches, evaluates, and proposes new information security solutions. Aligns information security systems with architectural requirements and strategies. Provides implementation and cost estimates for new solutions, including training requirements and system administration processes
• Collaborates with stakeholders to ensure the efficient operation of information security systems in alignment with architectural requirements and strategies

Risk Management

• Identifies and documents of highly complex information technology risks, assesses risk levels, recommends risk treatment, coordinates risk acceptance and remediation, and ensures appropriate remediation occurs
• Serves as the primary contact on assigned internal and third-party IT processes, risk assessments, and audits. Provides advice to key stakeholders on the security-relevant impact of findings
• Identifies and promotes applicable information security policies, standards, and guidelines, ensuring they are followed as part of project initiatives. Evaluates and recommends appropriate controls or mitigating measures
• Leads risk assessments and coordination of internal and external audit activities by collecting and providing documentation Performs information security system control testing and reports on system functionality

Consulting and Enablement

• Serves as security subject matter expert, collaborates with stakeholders, offers guidance, and serves as main security point of contact during project planning and implementation
• Leads troubleshooting sessions and knowledge transfers to resolve security issues including identity governance and access management
• Recommends solutions for aligning technology areas with future needs
• Offers highly technical guidance, training, and support to team members and stakeholders
• Proposes and develops automated processes to ensure consistent and appropriate event handling
• Leads the introduction of new security capabilities aligned with current standards and solutions

Documentation

• Collects and provides documentation for internal and external audits and assessments
• Documents information security systems policies, procedures, standards, needed improvements, and guidelines
• Maintains the document life cycle, including periodic reviews, updates, and approval cycles

Support

• Oversees assigned security tools/services and vendor life cycle management
• Schedules vendor meetings to review products, services, and vendor/tool roadmaps
• Drives renewals and new purchases through the EMC vendor management and purchase process
• Shares troubleshooting and resolution details with the team, stakeholders, and other IT teams
• Ensures purchases and renewals are processed in a timely manner, meets security budgetary goals, and avoids disruptions to security services and projects

Education & Experience:

• Bachelor’s degree, preferably in information security, information technology, or a related field, or equivalent relevant experience
• Eight years of experience in information security, identity and access management, or related roles, including at least four years of experience in information security
• undefined
• Master’s degree, preferably in information security, information technology, or a related field or equivalent related experience and six years of experience in information security, identity and access management, or related roles, including at least four years of experience in information security
• Information security certifications (CISSP, CCSP, CCSK, AWS, Azure, Security+, CEH, GSEC) preferred
• Prior experience in the insurance industry preferred

Knowledge, Skills & Abilities:

• Advanced knowledge of information security and privacy standards, concepts, principles, technologies, and audit practices
• Advanced knowledge of information technology including network, servers, cloud, and PKI/cryptography and identity and access management technologies
• Excellent knowledge of identity and access management concepts, principles, technologies
• Excellent ability to assess and report on information technology risks
• Strong knowledge of Linux and Windows operating systems
• Strong knowledge of secure cloud solutions within AWS, Google, and/or Azure cloud platforms
• Strong ability to perform and create automation tasks with tools (i.e., PowerShell, Python) preferred
• Experience in designing, building, and maintaining information security systems
• Excellent analytical and problem-solving abilities
• Strong verbal and written communication skills
• Excellent ability to work effectively with others at varying levels
• Excellent documentation skills
• Ability to lead moderate to highly complex technology projects

The hiring salary range for this position will vary based on geographic location, falling within either of the following:

$103,954 - $149,372 or $114,895 - $164,309

A hiring range represents a subset of the full salary range.The actual salary will depend on several factors, includingrelevant education, skills, and experience of an applicant, geographic location, and business needs.

For information relating to the benefits EMC Team Members receive as part of a comprehensive rewards package, please visit www.emcins.com/careers.

Our employment practices are in accordance with the laws that prohibit discrimination due to race, color, creed, sex, sexual orientation, gender identity, genetic information, religion, age, national origin or ancestry, physical or mental disability, medical condition, veteran status, active military status, citizenship status, marital status or any other consideration made unlawful by federal, state, or local laws.

_ All of our locations are tobacco free including in company vehicles. _