job summary:
Enterprise Healthcare client has an immediate opening for a highly motivated Infrastructure Security Engineer II to join their dynamic and growing team. All qualified candidates are encouraged to apply!
location: Telecommute
job type: Contract
salary: $40.76 - 50.76 per hour
work hours: 8am to 5pm
education: Bachelors
responsibilities:
- What is the purpose of this team?
- What is driving this need? (ex. Backfill for FTE or CW, new project, business growth)
- Describe the surrounding team (team culture, work environment, etc.) & key projects.
- Do you have any additional upcoming hiring needs or is this request part of a larger hiring initiative? - The mission of the Secure Posture Engineering (SPE) Team is to engineer, operate, and continuously improve security platforms, tooling, data pipelines, and validation capabilities that enable accurate, scalable, and actionable exposure management across the enterprise. SPE continuously identifies what exists, what is exposed, and what truly matters, then supports remediation through evidence-based prioritization. The focus is on exposures that are reachable, applicable, and exploitable in our environment, ensuring teams spend time fixing the risks that reduce maximum business impact.
- Contractor support is requested to absorb foundational engineering and operational work, enabling senior engineers to focus on higher-value security initiatives, complex technical challenges, and critical risk reduction efforts. This investment will accelerate program delivery, improve operational maturity, reduce backlog pressure, and create an opportunity to identify and recruit high-performing talent through a contract-to-hire model.
- High-performing Team in a positive, collaborative environment where people feel trusted, valued, and appreciated. Key projects: Attack Surface Management - Cloud (Wiz) & On Prem (Tenable), external asset inventory discovery and exposure; Asset, exposure and posture correlation, normalization and prioritization across Cloud & On Prem (Armis AMS / VIPR and Zafran); Secure configuration baseline compliance measurement and drift across Cloud (Wiz) and On Prem (Tenable) environments.
- No additional hiring needs beyond these 2 positions.
Typical Day in the Role
- Walk me through the day-to-day responsibilities and a description of the project (Outside of the Workday JD).
- What are the performance expectations/metrics?
- What makes this role unique? - Day-to-Day responsibilities (ASM Engineer) Tenable & Wiz:
o Responsible for execution of exposure triage within Secure Posture Engineering, ensuring findings are validated for reachability and applicability, enriched with business and attack-path context, and prepared as high-confidence outputs for existing downstream workflow routing and remediation.
o Key Responsibilities
? Validate exposure reachability and applicability using available telemetry, configuration data, and environmental context
? Curate and assemble evidence to support exposure accuracy, impact, and prioritization decisions
? Enrich findings with business context, asset criticality, and attack-path analysis to improve risk clarity
? Normalize and prepare triaged outputs for routing into remediation, exception, or risk acceptance workflows
? Reduce false positives and duplicate findings through correlation, deduplication, and validation processes
? Partner with vulnerability management, cloud, application, and platform teams to ensure actionable and context-rich outputs
? Continuously improve triage methodologies, enrichment techniques, and signal quality
- Performance Expectations/Metrics:
o Increased visibility into the enterprise internet-facing footprint, including unknown, unmanaged, and atypical assets introducing measurable exposure
o Reduced time from discovery and validation of material exposures to workflow publication in ServiceNow for ownership attribution and remediation tracking
o Reduction in critical and exploitable exposures through evidence-based prioritization aligned to reachability, exploit likelihood, and business impact
o Improved quality and consistency of normalized finding data, including evidence completeness, asset mapping accuracy, and reduced duplicate or unstable records
o Improved control effectiveness through continuous validation of preventive and detective controls against priority threats and techniques
o Demonstrated reduction in exposure windows for high-risk findings and improved transparency into risk burn-down and closure progress
- What makes this role unique?
o Building a comprehensive program to discover, assess and communicate internet exposed assets across both the Cloud and On Prem environments. This role is the bridge between detecting security issues and enabling the enterprise to act on the right risks quickly, consistently, and at scale.
qualifications:
Bachelors
skills:
Agile,CompTIA Security+,Security+,networking technologies,CIAM,data analysis,IT General Controls,Enterprise IT,computer science,Excel,Microsoft Visio,SCRUM,shell scripts,software development methodologies,SDLC,strong analytical and critical thinking,attention to detail,critical thinking,sound judgment,decision-making,Soft Skills,Ability to work independently,independently,CISM,CISSP,cross-functional communication,CompTIA Security+ Certification,Security+,Encryption,cybersecurity certification,collect data,establish facts,infrastructure security,Baseline security,mathematics,statistics,National Institute of Standards and Technology (NIST),process modeling,risk identification,security risk assessments,Risk,Standardization,technical analysis,hard skills
Equal Opportunity Employer: Race, Color, Religion, Sex, Sexual Orientation, Gender Identity, National Origin, Age, Genetic Information, Disability, Protected Veteran Status, or any other legally protected group status.
At Randstad Digital, we welcome people of all abilities and want to ensure that our hiring and interview process meets the needs of all applicants. If you require a reasonable accommodation to make your application or interview experience a great one, please contact
Pay offered to a successful candidate will be based on several factors including the candidate's education, work experience, work location, specific job duties, certifications, etc. In addition, Randstad Digital offers a comprehensive benefits package, including: medical, prescription, dental, vision, AD&D, and life insurance offerings, short-term disability, and a 401K plan (all benefits are based on eligibility).
This posting is open for thirty (30) days.
It is unlawful in Massachusetts to require or administer a lie detector test as a condition of employment or continued employment. An employer who violates this law shall be subject to criminal penalties and civil liability.
![]()
