Lead, Infrastructure Security Engineer

What You'll Do

Vulnerability Management

• Own the vulnerability management lifecycle end-to-end - scanning, prioritization, remediation tracking, reporting, and exception management.
• Deploy and maintain vulnerability scanning infrastructure, including credentialed scanning across servers, network devices, and endpoints.
• Develop risk-based prioritization frameworks that account for asset criticality, exploit availability, and business context.
• Build remediation tracking and SLA reporting processes in partnership with Infrastructure and IT teams.
• Manage vulnerability exception and risk acceptance workflows.

On-Premises Infrastructure Security

• Secure on-premises Active Directory - tiered administration model, GPO hardening, service account hygiene, privileged group management.
• Implement and maintain secure configuration baselines for Windows and Linux servers (CIS Benchmarks, DISA STIGs, or equivalent).
• Coordinate patching schedules and change management with Infrastructure, ensuring timely remediation without impacting operations.
• Conduct security assessments for new infrastructure deployments and third-party integrations.

Network & Physical Environment Security

• Implement and maintain network segmentation - VLANs, firewall policies, IDS/IPS, and access control lists.
• Secure remote access infrastructure - VPN, jump boxes, privileged access management.
• Partner with the Infrastructure team on network architecture reviews and security hardening.
• Maintain documentation of network security architecture, diagrams, and configurations.

Legacy & Manufacturing Environment Security

• Secure legacy and manufacturing floor environments that cannot be patched or upgraded - microsegmentation, compensating controls, risk acceptance documentation.
• Implement monitoring for unmanaged and OT assets - device inventory, network isolation, anomaly detection.
• Partner with Quality/Regulatory on FDA-validated system constraints and re-qualification requirements
• Drive decommission planning for end-of-life systems.

What You Bring

• Bachelor's degree in Cybersecurity, Computer Science, Information Technology, or related field preferred; equivalent professional experience or in-progress degree considered.
• Industry certifications preferred: CISSP, CompTIA Security+, CySA+, GIAC (GSEC, GCSA), or equivalent.
• 4+ years of progressive experience in infrastructure security, security engineering, or related cybersecurity roles.
• Demonstrated vulnerability management experience - deployment and operation of scanning platforms (Tenable/Nessus, Qualys, or equivalent), credentialed scanning, and risk-based prioritization.
• Strong Active Directory and Windows Server security knowledge - tiered administration, GPO, service account management, domain hardening.
• Network security depth - segmentation, firewall management, IDS/IPS, VPN, and routing/switching security.
• Experience with secure configuration baselines (CIS Benchmarks, DISA STIGs) and compliance scanning.
• Medical device, healthcare, or regulated industry experience preferred.
• Strong communication and collaboration skills.

Compensation

Pay for this role is competitive and based on experience, with additional factors like territory requirements, qualifications, and performance taken into account. The typical pay range for this position is $125 000 -135 000 annually, with potential for bonuses and incentives plus benefits.

VB Spine reserves the right to offer compensation outside of this listed range. Final compensation is determined on a case-by-case basis and considers a variety of factors including experience level, skillset, and market conditions.

Benefits include

• Comprehensive health, dental, and vision insurance
• 401(k) with company match
• Paid time off (PTO) and holidays
• Ongoing training and professional development opportunities
• Opportunity to grow within a fast-paced, dynamic company

Company: Vb Spine

Looking for a career where your work truly matters? At VB Spine, you'll be part of a mission-focused team that supports surgeons during life-changing spinal procedures. We're looking for driven individuals ready to learn quickly, adapt under pressure, and grow in a dynamic, fast-paced environment.

As a Spine Sales Associate, you'll own the security of VB Spine's on-premises and physical infrastructure - including vulnerability management, Active Directory, servers, network infrastructure, and manufacturing/legacy environments.

The ideal candidate will partner closely with the Infrastructure team to harden the physical environment, drive vulnerability management end-to-end, and implement compensating controls for systems that cannot be patched or upgraded.