Job description

Position Purpose: The Senior Infrastructure Security Engineer is responsible for operating and maturing Centene’s Attack Surface Management (ASM) and Breach Attack Simulation (BAS) programs across hybrid, cloud, on-premises, and enterprise environments. This role strengthens security visibility and risk reduction by validating internet-facing assets, confirming ownership, assessing security coverage, maintaining inventory accuracy, coordinating remediation activities, executing breach attack simulation exercises, validating control effectiveness, and producing actionable reporting. The position partners across security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, validate defensive controls, and support effective security program operations. Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT. Ensures the implementation and maintenance of application security standards as per industry best practices. Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement. Audits of application security and operational configurations. Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc. Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties. Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards. Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process. Undertakes initiatives/policies to review and generate recommendations for the application security configuration. Performs other duties as assigned. Complies with all policies and standards. Education/Experience: A Bachelor s degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position. Technical Skills: Attack Surface Management: Tenable and Wiz. Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling. Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz. Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools. Preferred Experience: Attack Surface Management and external asset discovery. Breach Attack Simulation, adversary emulation, control validation, and security detection improvement. Asset inventory management, ownership validation, and security coverage assessment. Vulnerability management, remediation coordination, and ServiceNow workflow support. Security reporting, metrics development, process documentation, and cross-functional program coordination. Soft Skills: Intermediate - Seeks to acquire knowledge in area of specialty. Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions. Intermediate - Ability to work independently. Intermediate - Demonstrated analytical skills. Intermediate - Demonstrated project management skills. Intermediate - Demonstrates a high level of accuracy, even under pressure. Intermediate - Demonstrates excellent judgment and decision making skills. License/Certification: CompTIA Security Certification preferred. Pay Range: $87,000.00 - $161,300.00 per year At Centene, we connect people to the care they need to live healthier lives — and the work you do here makes that impact real every day. You’ll take on meaningful challenges that directly support individuals, families, and communities, building your skills while making healthcare more accessible and effective. It’s work with a purpose you can see, backed by a team committed to improving lives well beyond the workday. Centene offers a comprehensive benefits package including: competitive pay, health insurance, 401K and stock purchase plans, tuition reimbursement, paid time off plus holidays, and a flexible approach to work with remote, hybrid, field or office work schedules. Actual pay will be adjusted based on an individual s skills, experience, education, and other job-related factors permitted by law , including full-time or part-time status. Total compensation may also include additional forms of incentives. Benefits may be subject to program eligibility. Centene is an equal opportunity employer that is committed to diversity, and values the ways in which we are different. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, disability, veteran status, or other characteristic protected by applicable law. Qualified applicants with arrest or conviction records will be considered in accordance with the LA County Ordinance and the California Fair Chance Act

Requirements

Must-haves

Ensures the implementation and maintenance of application security standards as per industry best practices.
Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement.
Audits of application security and operational configurations.
Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc.
Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties.
Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards.
Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process.
Undertakes initiatives/policies to review and generate recommendations for the application security configuration.
Performs other duties as assigned.
Complies with all policies and standards.
Education/Experience: A Bachelor s degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience.
Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position.
Attack Surface Management: Tenable and Wiz.
Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling.
Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz.
Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools.
Intermediate - Seeks to acquire knowledge in area of specialty.
Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions.

Nice-to-haves

Attack Surface Management and external asset discovery.
Breach Attack Simulation, adversary emulation, control validation, and security detection improvement.
Asset inventory management, ownership validation, and security coverage assessment.
Vulnerability management, remediation coordination, and ServiceNow workflow support.
Security reporting, metrics development, process documentation, and cross-functional program coordination.
CompTIA Security Certification preferred.

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

jira

Platform: workday
Effort: long

Benefits

Benefits detected in the listing.

Health Insurance

401k

Paid Time Off