job summary:
Enterprise Healthcare client has an immediate opening for a highly motivated Infrastructure Security Engineer II to join their dynamic and growing team. All qualified candidates are encouraged to apply!
location: Telecommute
job type: Contract
salary: $40.76 - 50.76 per hour
work hours: 8am to 4pm
education: Bachelors
responsibilities:
- What is the purpose of this team?
- What is driving this need? (ex. Backfill for FTE or CW, new project, business growth)
- Describe the surrounding team (team culture, work environment, etc.) & key projects.
- Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? - The mission of the Secure Posture Engineering (SPE) Team is to engineer, operate, and continuously improve security platforms, tooling, data pipelines, and validation capabilities that enable accurate, scalable, and actionable exposure management across the enterprise. SPE continuously identifies what exists, what is exposed, and what truly matters, then supports remediation through evidence-based prioritization. The focus is on exposures that are reachable, applicable, and exploitable in our environment, ensuring teams spend time fixing the risks that reduce maximum business impact.
- Contractor support is requested to absorb foundational engineering and operational work, enabling senior engineers to focus on higher-value security initiatives, complex technical challenges, and critical risk reduction efforts. This investment will accelerate program delivery, improve operational maturity, reduce backlog pressure, and create an opportunity to identify and recruit high-performing talent through a contract-to-hire model.
- High-performing Team in a positive, collaborative environment where people feel trusted, valued, and appreciated. Key projects: Attack Surface Management - Cloud (Wiz) & On Prem (Tenable), external asset inventory discovery and exposure; Asset, exposure and posture correlation, normalization and prioritization across Cloud & On Prem (Armis AMS / VIPR and Zafran); Secure configuration baseline compliance measurement and drift across Cloud (Wiz) and On Prem (Tenable) environments.
- No additional hiring needs beyond these 2 positions.
Typical Day in the Role
- Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).
- What are the performance expectations/metrics?
- What makes this role unique? - Day-to-Day responsibilities (Platform & Integration Engineer) across all tools:
o Responsible for engineering and maintaining the Secure Posture Engineering tooling, data pipelines, and integrations, ensuring reliable ingestion, normalization, and distribution of posture and exposure data across platforms and into enterprise workflow systems. Ensures data quality, consistency, and availability to support triage, prioritization, reporting, and remediation at scale.
o Key Responsibilities
? Engineer and maintain integrations across posture, exposure, and asset data sources to ensure consistent and complete data coverage
? Build and operate data pipelines to ingest, transform, and distribute security findings across platforms
? Normalize asset identifiers, ownership metadata, and finding schemas to create a unified data model
? Publish validated and enriched findings into ServiceNow for workflow routing, assignment, and lifecycle tracking
? Monitor and improve data quality, pipeline performance, and integration reliability across the ecosystem
? Partner with triage, architecture, and platform teams to align data outputs with operational and business needs
- Performance Expectations/Metrics:
o Increased visibility into the enterprise internet-facing footprint, including unknown, unmanaged, and atypical assets introducing measurable exposure
o Reduced time from discovery and validation of material exposures to workflow publication in ServiceNow for ownership attribution and remediation tracking
o Reduction in critical and exploitable exposures through evidence-based prioritization aligned to reachability, exploit likelihood, and business impact
o Improved quality and consistency of normalized finding data, including evidence completeness, asset mapping accuracy, and reduced duplicate or unstable records
o Improved control effectiveness through continuous validation of preventive and detective controls against priority threats and techniques
o Demonstrated reduction in exposure windows for high-risk findings and improved transparency into risk burn-down and closure progress
- What makes this role unique?
o Building a comprehensive program to discover, assess and communicate internet exposed assets across both the Cloud and On Prem environments. This role is the bridge between detecting security issues and enabling the enterprise to act on the right risks quickly, consistently, and at scale.
qualifications:
Bachelors
skills:
Agile,API,CompTIA Security+,Security+,networking technologies,CIAM,data analysis,Data pipeline,IT General Controls,Enterprise IT,computer science,Excel,Microsoft Visio,SCRUM,shell scripts,software development methodologies,SDLC,strong analytical and critical thinking,attention to detail,critical thinking,sound judgment,decision-making,Soft Skills,Reliability,Ability to work independently,independently,CISM,CISSP,CompTIA Security+ Certification,Security+,Encryption,cybersecurity certification,collect data,establish facts,infrastructure security,Baseline security,mathematics,statistics,National Institute of Standards and Technology (NIST),process modeling,risk identification,security risk assessments,Standardization,hard skills
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
![]()
