Senior Infrastructure Security Engineer

Purpose: The Senior Infrastructure Security Engineer is responsible for operating and maturing Centene’s Attack Surface Management (ASM) and Breach Attack Simulation (BAS) programs across hybrid, cloud, on-premises, and enterprise environments. This role strengthens security visibility and risk reduction by validating internet-facing assets, confirming ownership, assessing security coverage, maintaining inventory accuracy, coordinating remediation activities, executing breach attack simulation exercises, validating control effectiveness, and producing actionable reporting. The position partners across security, infrastructure, cloud, application, risk, compliance, and business teams to improve accountability, reduce exposure, validate defensive controls, and support effective security program operations. Key Details: Must be authorized to work in the U.S. without the need for employment-based visa sponsorship now or in the future. Sponsorship and future sponsorship are not available for this opportunity, including employment-based visa types H-1B, L-1, O-1, H-1B1, F-1, J -1, OPT, or CPT. Ensures the implementation and maintenance of application security standards as per industry best practices. Performs architectural analysis of the current application security architecture to detect critical deficiencies and recommend solutions for improvement. Audits of application security and operational configurations. Monitors & remediates application security incoming alerts/vulnerabilities like malware, injection attacks, unauthorized access, etc. Creates application security documents, design standard operating procedures, report findings, and track them to closure by working with related parties. Automates routine operational tasks related to application security and design self-service options to align with best-in-class security standards. Implements application security solutions such as authentication, authorization, encryption, logging, and application security testing throughout the secure software development life cycle (SSDLC) process. Undertakes initiatives/policies to review and generate recommendations for the application security configuration. Performs other duties as assigned. Complies with all policies and standards.

A Bachelor's degree in a quantitative or business field (e.g., statistics, mathematics, engineering, computer science) and Requires 4 – 6 years of related experience. Or equivalent experience acquired through accomplishments of applicable knowledge, duties, scope and skill reflective of the level of this position. Technical Skills: Attack Surface Management: Tenable and Wiz. Breach Attack Simulation: Wiz and other BAS simulation platforms and control validation tooling. Asset visibility and vulnerability management: Armis Centrix, Armis VIPR, Tenable, and Wiz. Workflow, collaboration, and reporting: ServiceNow, Microsoft 365, SharePoint, Power BI, Jira, and project tracking tools.

Attack Surface Management and external asset discovery. Breach Attack Simulation, adversary emulation, control validation, and security detection improvement. Asset inventory management, ownership validation, and security coverage assessment. Vulnerability management, remediation coordination, and ServiceNow workflow support. Security reporting, metrics development, process documentation, and cross-functional program coordination. Soft Skills: Intermediate - Seeks to acquire knowledge in area of specialty Intermediate - Ability to identify basic problems and procedural irregularities, collect data, establish facts, and draw valid conclusions Intermediate - Ability to work independently Intermediate - Demonstrated analytical skills Intermediate - Demonstrated project management skills Intermediate - Demonstrates a high level of accuracy, even under pressure Intermediate - Demonstrates excellent judgment and decision making skills License/Certification: CompTIA Security+