Infrastructure Engineer - Asset Hardening Lead Analyst

Regular or Temporary: Regular

Language Fluency: English (Required)

Work Shift: 1st shift (United States of America)

Leads enterprise asset hardening and security baseline governance activities to reduce technology risk and strengthen the security posture of infrastructure platforms. Applies expertise in secure configuration management, security standards, vulnerability mitigation, and compliance requirements to ensure technology assets are configured and maintained in accordance with enterprise policies and industry best practices. Partners with engineering, cybersecurity, risk, and operations teams to drive security baseline adoption, configuration compliance, remediation activities, and continuous improvement of asset hardening processes.

Serves as a subject matter expert for security configuration governance and infrastructure risk reduction initiatives.

ESSENTIAL DUTIES AND RESPONSIBILITIES
Following is a summary of the essential functions for this job. Other duties may be performed, both major and minor, which are not mentioned below. Specific activities may change from time to time.

• Analyze security configuration assessment results, security standards, benchmark requirements, and control findings to determine remediation requirements, risk exposure, and mitigation strategies.
• Partner multiple platform teams to coordinate timely remediation of security baseline deficiencies and ensure compliance with established service level agreements (SLAs) and security standards.
• Support asset hardening governance processes, including remediation tracking, exception management, risk reviews, escalation activities, and management reporting.
• Monitor and report on security baseline compliance, remediation progress, aging exceptions, and configuration risk metrics to support operational and regulatory requirements.
• Develop and maintain dashboards, metrics, KPIs, and reporting to measure asset hardening performance and security configuration compliance.
• Conduct root cause analysis for recurring configuration deficiencies and control failures and recommend improvements to reduce security risk.
• Collaborate with Cyber Security, Risk Management, Audit, Compliance, Technology Operations, and application teams to support examinations, control testing, audit requests, and regulatory inquiries.
• Identify opportunities to improve remediation efficiency through automation, workflow enhancements, system integrations, and process standardization.
• Review and validate remediation evidence and configuration compliance records to ensure accuracy and audit readiness.
• Serve as a subject matter resource for asset hardening and security baseline compliance processes, providing guidance to technology teams and stakeholders.
• Coordinate cross-functional remediation initiatives involving high-risk configuration findings and security control deficiencies.

Qualifications

Required Qualifications

1. Bachelor’s degree in Computer Science, Engineering, Information Systems, a related field, or equivalent education, training, and work-related experience.
2. Minimum of 5 years of professional experience in infrastructure engineering.
3. Strong knowledge of enterprise infrastructure technologies including cloud, network, database, storage, platform, computing, and middleware.

Preferred Qualifications

• 5+ years of experience in infrastructure security, asset hardening, secure configuration management, cybersecurity, technology risk management, or related disciplines.
• Advanced experience developing, implementing, and governing enterprise asset hardening and security baseline programs.
• Strong knowledge of security frameworks and standards, including CIS Benchmarks, NIST, DISA STIGs, ISO 27001, FFIEC, and PCI DSS.
• E…