Sr. Security Engineer (Remote)

Inspira Financial is seeking a Senior Security Engineer to support and improve its security systems and program. The role focuses on application security, vulnerability management, audits, third-party risk, security governance, analytics, stakeholder support, and on-call incident response.

Responsibilities:

• Develop a strong knowledge and skillset across all security functional areas including application security, technical project management, third party risk, policy governance, awareness training
• Contribute and assist in the coordination of evidence collection and audit maintenance for organizational assessments
• Contribute to all aspects of application security, including vulnerability assessments, penetration testing, code review, and security training
• Coordinate and assist in the evidence collection and response queries for inbound and outbound security and IT due diligence as part of a third-party risk management program
• Assist in the implementation of security related SDLC practices including code reviews, static/dynamic code analysis and vulnerability assessments
• Maintain awareness of known vulnerabilities in application technologies used within Inspira
• Research into suspected application vulnerabilities
• Lead efforts to respond to findings from audits, security questionnaires, and internal/external scanning or testing
• Assist in the development of the policies and procedures related to information security, ensuring compliance with relevant regulations and standards
• Coordinate risk assessments on third-party vendors. Triage and implement appropriate controls to mitigate identified risks
• Assist and coordinate cross-functional work with other internal business units, such as Compliance, Legal, IT, Finance, HR, and engage with other leaders to drive security outcomes that benefit the organization
• Track and provide security metrics, status updates and reports for the Inspira Security Program
• Provide guidance to Security Engineer I/II roles
• Other duties as assigned
• Participate in the team’s on-call rotation to monitor and respond to security alerts and incidents in real time
• Acknowledge alerts from the designated on-call monitoring system within a 60-minute window and provide a quick status update (e.g., “Investigating,” “Will engage within X minutes,” etc.)
• Ensure your company-issued laptop and required access tools are available during on-call shifts, including when traveling or away from your primary work location for extended periods
• Maintain readiness to troubleshoot, mitigate, or escalate security issues in accordance with established incident response procedures

Requirements:

• 5-7 years of experience
• Bachelor's Degree in Computer Science, Software/Computing Engineering, Applied Mathematics, or related field
• Highly self-motivated
• Possess a combination of technology, security, and analytics skills
• Intellectual curiosity to find new and unusual ways of how to solve cyber security issues
• Ability to approach cyber security challenges while keeping an eye on what is important
• Experience interpreting, analyzing, and maintaining systems
• Ability to create and maintaining respectful, strong working relationships with both IT and business units to integrate security principles with business operations
• Strong client service orientation
• Ability to prioritize, plan and take initiative and be highly self-motivated
• Strong verbal and written communication skills; positive attitude; ability to work as team member
• Knowledge of the Financial or Insurance Services Industry preferred
• Experience in a high availability environment preferred
• Knowledge of NIST and CIS practices and frameworks preferred