Principal Engineer, IT Security

Job Description

We are seeking a Senior Security Engineer to champion the security, integrity, and compliance of our global infrastructure. In this high-visibility role, you will act as a strategic bridge between deep technical execution and executive-level governance, routinely interfacing with Senior Leadership and the CIO to present risk postures, security metrics, and SLA compliance. Balancing multi-disciplinary expertise across host and network security, with a sharp specialization in vulnerability management, you will drive critical initiatives to help drive a more robust asset management framework and lifecycle refresh programs (maintaining N/N-1 standards), and accelerate system decommissions to minimize our attack surface.

You will also sit on our Security Review Board to assist with security architecture reviews for IT initiatives throughout the company. On the operational front, you will provide direct assistance in maintaining an uncompromising, pristine security posture in both appearance and reality. This includes incorporating the outputs of various tools in our cloud and datacenter environments, establishing direct, collaborative relationships with Firewall and Infrastructure Operations teams, and prioritizing the remediation of confirmed vulnerabilities over potential ones to systematically reduce true risk.

As a core representative on the Vulnerability Council, and Security Review Board (SRB), you will drive the security messaging, synthesizing SRB findings, vulnerability reporting and exception data into a unified, accurate narrative. The Principle IT Security Engineer also must support the continual improvement of our IT security infrastructure. The person in this position will be a thought leader in the IT organization and considered a subject matter expert in multiple security-related areas as well as in the field of IT Security and or risk overall.

This position requires advanced security expertise. Additionally, strong written and oral communication skills are important for this role. To maintain our security posture, this position may occasionally collaborate on after-hours or weekend response for high-priority security events.

Please note this is a hybrid opportunity (3 days in office & 2 days WFH). This position can be based in Secaucus, NJ or Schaumburg IL.

Pay Range: $160,000 - $170,000 / year

• Day 1 Medical, supplemental health, dental & vision for FT employees who work 30+ hours
• Best-in-class well-being programs
• Annual, no-cost health assessment program Blueprint for Wellness®
• healthy MINDS mental health program
• Vacation and Health/Flex Time
• 6 Holidays plus 1 "MyDay" off
• Fin Fit financial coaching and services
• 401(k) pre-tax and/or Roth IRA with company match up to 5% after 12 months of service
• Employee stock purchase plan
• Life and disability insurance, plus buy-up option
• Flexible Spending Accounts
• Annual incentive plans
• Matching gifts program
• Education assistance through MyQuest for Education
• Career advancement opportunities
• and so much more!

• Develops security and or risk strategies and solutions to improve, augment and enhance the posture of IT Security at Quest Diagnostics.
• Advise on and/or support a variety of security tools. These may include products and tools in various areas including: network vulnerability scanning, application vulnerability scanning; network and application access controls; intrusion detection systems; data loss prevention, security incident and event management (SIEM), etc.
• Assists in the review and alignment of applicable IT security SOP’s.
• Periodically reviews and updates corporate IT Security standards and procedures as required by such changes in technologies, business activities, corporate policies and/or…