Information Security Engineer

Purpose

Responsible for executing the existing program while transforming and building a world class compliance and proactive security-focused Information Security program. Responsible for MGIC's vulnerability information, intelligence, and risk mitigation collection, analysis, dissemination of information, and enforcement.

Primary Duties and Responsibilities

The following statements describe the general nature of work performed by people assigned to this job, may not be performed by all individuals in this job, and are not a complete list of all job duties required.

• Supports all aspects of security system administration, vulnerability management, security systems and threat monitoring, and conducting day to day operations including all tiers of security support.
• Performs regular risk and security control assessments, analyze effectiveness, identify risk and control weaknesses and recommend remedial action.
• Applies critical and analytical thinking and techniques against security data and events to drive, evolve and advance security monitoring and threat detection and response.
• Develops, documents and maintains security architecture and plans, processes, procedures, including strategic, tactical and project plans to ensure that security issues are addressed throughout the project and system life cycle.
• Provides technical authority, vision, documentation of operational procedures and guidance to grow, manage, run and evolve the MGIC Vulnerability Management Program.
• Participates in initial discussions of new platforms, applications, and/or any significant addition to MGIC's information systems. Provides input in developing long- and short-term plans for providing necessary security design, controls and/or technologies.
• Participates in corporate disaster recover/business continuity planning team. Provides security representation on large enterprise projects.
• Creates and consolidates vulnerability status reporting from disparate sources, security incident and event data, unresolved network security exposures, misuse of information assets, noncompliance audit remediation to produce weekly and monthly exception and management reports.
• Researches and explores new security threats, vulnerability trends, alerts and recommends and implements remedial monitoring and actions.
• Develops, implements, and manages the overall enterprise information security strategy and associated architecture, solutions, policies, standards and guidelines.
• Provides support to the Computer Incident Response Team (CIRT) in the effective detection, analysis, and containment of attacks.
• Nature of business environment requires 24/7 availability.

Preferences

• Experience with Snyk and Rapid 7

Qualifications

• 3+ years of experience
• Education: Completion of a Bachelor's Degree in Computer Science, Computer Security or Information Assurance. Additional years of related work experience (2) or equivalent hands-on experience.

Pay Range

$86,070.00 - $142,020.00

This range aligns with current market data and reflects our commitment to competitive and equitable compensation. Salary offers are based on factors such as experience, skills, education, and training. The range may vary in certain locations to reflect local market conditions. It is not typical to initiate pay at the top of the range to account for internal equity and allow for future and continued salary growth

Enjoy these benefits from day one

• Competitive Salary & pay-for-performance bonus
• Financial Benefits (401k with company match, profit sharing, HSA, wellness program)
• On-site Fitness Center and classes (corporate office)
• Paid-time off and paid company holidays
• Business casual dress

Note to all recruitment agencies

• MGIC does not accept unsolicited agency resumes.
• Any unsolicited resumes sent to MGIC, directly or indirectly, will be considered MGIC property.
• MGIC is not responsible for any agency fees associated with unsolicited resumes.
• A recruiting agency must have a valid, written and fully executed agency agreement to assist with a requisition.