Cybersecurity Threat Intelligence Engineer II

Cybersecurity Threat Intelligence Engineer II

Workforce Classification:
Hybrid.

Location:

Mountlake Terrace, WA, Washington. Hybrid work model.

• Respond to cyber security incidents with advanced forensic analysis.
• Perform risk and severity assessment on cybersecurity events and incidents, and properly escalates or handles based on current processes.
• Act as a technical contributor in the PICERL (Planning, Investigation, Containment, Eradication, Lessons Learned) process, as well as investigative, legal, and conflict‑resolution processes.
• Analyze gaps identified in threat‑hunting exercises and reduce the overall threat landscape.
• Set priorities, workflow, and tempo for day‑to‑day team operations.
• Review and report on IT security threat assessments for major changes to systems, applications, and networks.
• Utilize vulnerability assessment and penetration‑testing tools to evaluate system changes.
• Maintain expertise in security hacking and network‑penetration methods.
• Define, document, and oversee the implementation of defensive tactics and security‑configuration changes.
• Provide Level 3 technical analysis and evidence capture as part of security incident response.
• Define IT policies, standards, and procedures to ensure compliance with enterprise security policies and regulatory standards such as SOX, HIPAA, PCI, GLBA, and state and federal privacy laws.
• Mentor and guide junior information security engineers.
• Perform duties with minimal supervision.
• Carry out additional duties as assigned.

• Bachelor’s degree in Information Systems, Business Administration, or four (4) years of experience.
• Three (3) years of experience designing, implementing, and troubleshooting networked computer systems, including integration, hardware, and network‑design planning.
• Two (2) years of experience with secure network and system architecture, intrusion detection, defense, incident response, security‑configuration management, access‑control design and implementation, and security‑policy and standard development.
• Demonstrated understanding of health‑plan operations and applicable security and privacy legislation.
• Knowledge of business continuity planning practices.
• Knowledge of data‑privacy and protection laws.
• In‑depth knowledge of protocols and technologies including ARP, TCP/UDP, IP, NetBIOS, Radius, 802.1x, Bind/DNS, Active Directory, LDAP, SMTP, DHCP, SSH, SFTP, FTP, TFTP, SNMP, SSL/HTTPS, NTP, Sun, Syslog, VoIP, QoS, VLANs, wireless protocols (802.11, WPA/2, WEP, TTLS, PEAP), routing protocols (RIP/2, OSPF, EIGRP, Frame‑relay, MPLS), and database systems (SQL Server, Oracle, MySQL).
• Understanding of operating‑system architecture and security subsystems.

• Medical, vision, and dental coverage with low employee premiums.
• Voluntary benefits such as pet insurance.
• Life and disability insurance.
• Retirement programs including 401(k) employer match and a pension plan.
• Wellness incentives and mental‑wellness resources.
• Generous paid time off and tuition assistance.
• Employee recognition program.
• On‑site parking, subsidized cafes, and fitness & wellness center.
• Commuter perks and on‑campus activities.

National Plus Salary Range: $92,400.00 – $ (local market adjustments applied). Additional compensation may be discussed during interview.

Premera is an equal opportunity/affirmative action employer. Premera seeks to attract and retain the most qualified individuals without regard to race, color, religion, sex, national origin, age, disability, marital status, veteran status, gender identity, sexual orientation, genetic information, or any other protected characteristic under applicable law.