Principal Engineer, IT Security

Job Description

We are seeking aSenior Security Engineer to champion the security, integrity, and compliance of our global infrastructure. In this high-visibility role, you will act as a strategic bridge between deep technical execution and executive-level governance, routinely interfacing with Senior Leadership and the CIOto present risk postures, security metrics, and SLA compliance. Balancing multi-disciplinary expertise across host and network security, with a sharp specialization invulnerability management, you will drive critical initiatives to help drive a more robust asset management framework and lifecycle refresh programs (maintaining N/N-1 standards), and accelerate system decommissions to minimize our attack surface.

You will also sit on our Security Review Board to assist with security architecture reviews for IT initiatives throughout the company.

On the operational front, you will provide direct assistance in maintaining anuncompromising, pristine security posturein both appearance and reality. This includes incorporating the outputs of various tools in our cloud and datacenter environments, establishing direct, collaborative relationships with Firewall and Infrastructure Operations teams, and prioritizing the remediation of confirmed vulnerabilities over potential ones to systematically reduce true risk. As a core representative on the Vulnerability Council, and Security Review Board (SRB), you will drive the security messaging, synthesizing SRB findings, vulnerability reporting and exception data into a unified, accurate narrative.

The Principle IT Security Engineer also must support the continual improvement of our IT security infrastructure.

The person in this position will be a thought leader in the IT organization and considered a subject matter expert in multiple security-related areas as well as in the field of IT Security and or risk overall. This position requires advanced security expertise. Additionally, strong written and oral communication skills are important for this role. To maintain our security posture, this position may occasionally collaborate onafter-hours or weekend response for high-priority security events.

Please note this is a hybrid opportunity (3 days in office & 2 days WFH). This position can be based in Secaucus, NJ or Schaumburg IL .

Pay Range: $160,000 - $170,000 / year

Salary offers are based on a wide range of factors including relevant skills, training, experience, education, and, where applicable, certifications obtained. Market and organizational factors are also considered. Successful candidates may be eligible to receive annual performance bonus compensation.

We are proud to offer best-in-class benefits and programs to support employees and their families in living healthy, happy lives. Our pay and benefit plans have been designed to promote employee health in all respects – physical, financial, and developmental. Depending on whether it is a part-time or full-time position, some of the benefits offered may include:

• Day 1 Medical, supplemental health, dental & vision for FT employees who work 30+ hours
• Best-in-class well-being programs
• Annual, no-cost health assessment program Blueprint for Wellness®
• healthy MINDS mental health program
• Vacation and Health/Flex Time
• 6 Holidays plus 1 'MyDay' off
• Fin Fit financial coaching and services
• 401(k) pre-tax and/or Roth IRA with company match up to 5% after 12 months of service
• Employee stock purchase plan
• Life and disability insurance, plus buy-up option
• Flexible Spending Accounts
• Annual incentive plans
• Matching gifts program
• Education assistance through MyQuest for Education
• Career advancement opportunities
• and so much more!

• Develops security and or risk strategies and solutions to improve, augment and enhance the posture of IT Security at Quest Diagnostics.
• Advise on and/or support a variety of security tools. These may include products and tools in various areas including: network vulnerability scanning, application vulnerability scanning; network and application access controls; intrusion detection systems; data loss prevention, security incident and event management (SIEM), etc.
• Ass…