Information Security Engineer

Sinclair Broadcast Group is seeking an Information Security Engineer to support an enterprise Vulnerability Management program across business units, cloud, and infrastructure environments. In this onsite role in Cockeysville, MD, you will apply security-in-depth principles to reduce vulnerability risk while coordinating with internal stakeholders and external consultants.

What you will do

• Manage vulnerability management processes and solutions, including application security, CIS benchmarks, and other security services as required.
• Lead initiatives to develop and mature vulnerability management services in alignment with team and organizational goals.
• Drive remediation activities by understanding the impact of findings and establishing communication channels with key stakeholders.
• Identify, prioritize, communicate, and mitigate security risks across on-premises and hybrid or multi-cloud environments.
• Configure and tune security tools to find weaknesses in systems, applications, databases, and cloud environments.
• Support the program through remediation efforts tied to application (DAST) scans, security assessments, vulnerability scans, and related risk management activities and tools.
• Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program, including weekly reporting for vulnerability and risk reduction.
• Identify business-critical systems and environments, including mapping data types in enterprise assets, databases, cloud environments, and applications.
• Enforce compliance with company policies and standards, while contributing to sustainable security engineering standards and methodologies.
• Collaborate with outside vendors and consultants to select tools that meet or exceed department needs.
• Maintain awareness of current trends, publications, and emerging technologies related to risk and vulnerability management.
• Design, document, and implement procedures and techniques aligned with best practices for evaluating risk, system quality, and integrity.
• Track progress for vulnerability management related processes and continuously improve for better speed and operational flow.
• Support professional development and training required to excel in the role.

Qualifications

• Degree in an IT discipline, or equivalent work experience and/or equivalent IT certifications.
• 3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve program success.
• 4+ years of experience owning projects, enhancements, or other assignments through completion.
• Experience with major cloud vendors including Amazon Web Services (AWS), Azure, and Google Cloud Platform (GCP).
• Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
• Hands-on experience using vulnerability scanning tools and driving enterprise-level remediation (for example: Qualys, Tanium, Bitsight).
• Experience using Asset Management and Reporting Platforms.
• Professional security certifications preferred, such as Security+, Network+, CISSP, CEH, or CISM.
• Familiarity with security industry standards and best practices, including ISO 27001 and the NIST 800-53 series.
• Working knowledge of network and/or security technologies.

Tools and technologies

• Vulnerability Management, application security, CIS benchmarks, DAST
• AWS, Azure, Google Cloud Platform
• Qualys, Tanium, Bitsight
• Asset Management and Reporting Platforms
• ISO 27001, NIST 800-53 series
• Security+, Network+, CISSP, CEH, CISM

Compensation and benefits

Salary: USD 105,000 - 135,000 per year.

• Participation in a retirement plan
• Life and disability insurance
• Health, dental and vision plans
• Flexible spending accounts
• Sick leave
• Vacation time
• Personal time
• Parental leave
• Employee stock purchase plan