TASC - Senior Security Engineer

About TASC:

As the nation's largest, privately held third party benefits administrator of employee benefits, TASC has a Mission to improve the health, wealth and well-being of its customers, employees, and communities. We are a team of dedicated professionals. With more than 800 people working remotely for us, TASC is able to serve businesses of all sizes across every state in the US.

POSITION PURPOSE:

TASC is searching for a new Sr. Security Engineer to join our Enterprise Risk Management & Security team. This role provides technical leadership and subject matter expertise in information security, ensuring the confidentiality, integrity, and availability of organizational systems and data. The Senior Security Operations Engineer is responsible for designing, implementing, and maintaining security controls, monitoring threats, responding to incidents, and continuously enhancing the organization's security posture. This position plays a key role in delivering effective, scalable security solutions that balance risk management with business objectives.

POSITION DUTIES/RESPONSIBILITIES:

• Take a leading role in securing the systems and data from potential threats or compromise
• Design, implement, and execute systems' security defenses and capabilities across networks, databases, and internet/web operations
• Develop, implement, and effectively execute the security and monitoring operations
• Investigate security incidents and potential compromises to TCB systems and take actions to protect TCB systems. Utilize forensic best practices to investigate and maintain evidence integrity
• Oversee and enforce identity and access management controls, including privileged access governance, role-based access reviews, and integration of identity systems with enterprise authentication and authorization frameworks
• Consuming and operationalizing threat intel feeds (threat intelligence integration) to create/improve detection rules and make better risk decisions
• Consult on projects, design reviews, threat modeling sessions, and change board process to provide guidance on security architecture, posture, and/or impact as well as to ensure the integrity of new and/or existing business operations
• Continually evaluate TCB systems exposure to existing threats; including but not limited to reviewing security capabilities and provide advice on mitigating controls
• Consultandprovidesuggestionstomanagementonsecurityrelatedmatters
• Produce security metrics, KPIs, and reporting upwards to management or the board
• Stay informed and tuned to security industry trends, potential threats and vulnerabilities
• Research, evaluate, and make recommendations regarding security trends and innovations
• Evaluate system changes across the organization to assess and document the security risk and impact
• Evaluate third-party tools, vendors, or integrations for security risks
• Review and document policies, standards and procedures to maintain compliance
• Evaluate compliance and contractual requirements relative to systems capabilities
• Provide leadership, expertise and solutions on complex initiatives related to security
• Mentor others and may represent management at times
• Takes a leadership role on highly complex projects and provides guidance to less experienced staff
• Operates within TCB's guidelines pursuant to the Employee Handbook and all Policies and Procedures
• Perform additional duties as requested by Supervisor and/or Management

Government Careers

Show more