Information Security Engineer, Sr.

Job Description Summary:

Information Security Engineer, Sr.
Cottage Health



Location: Remote



Schedule: 40 hours/week



Duration: Temporary, minimum through mid-November, with possible extension depending on return date of employee on leave







Overview:
Cottage Health is looking for a Senior Information Security Engineer to lead the operationalization of a newly implemented vulnerability management platform. This is a hands on, implementation focused role, not a generalist security analyst position. The organization recently replaced its legacy vulnerability management tool with RunZero, and the platform is not yet integrated into their ServiceNow ticketing environment. The right candidate will own that integration end to end and turn the platform's output into actionable remediation work for the broader IT organization.







Required Experience:
3-5 years' experience in IT security or related field.



Preferred:
5-7 years IT experience with 2+ Years focusing on security engineering, security architecture, digital forensics/incident response, security operations or vulnerability management, in a medium size (500+ employees) or larger organization.







Education:
Bachelor's Degree in Computer Science, Information Security, Information Systems, or related field, and/or skills obtained through a combination of education, training, and experience. 4 years of related work experience may be substituted for the bachelor's degree requirement.







Top 3 Required Skills
1. Vulnerability Management Platform Operations (RunZero preferred)**
Hands on experience running and maturing a vulnerability management platform day to day, not just reviewing dashboards. Ability to get RunZero to a fully operational state as the primary vulnerability data source for the organization.
2. API Development and Integration Experience**
This is the most critical skill for the role. The candidate must be able to build and support an API integration between RunZero and ServiceNow so that vulnerability findings flow directly into the ticketing system, replacing the manual process left behind by the old tool.
3. Vulnerability Metrics, Reporting, and Remediation Prioritization**
Ability to baseline current vulnerability data, build trend and metrics reporting, and identify high impact "quick win" remediations (for example, a single patch that resolves a large volume of findings) that can be handed off to application teams for execution.







Additional Environment Context
- CrowdStrike: Used as one of the vulnerability data sources; familiarity is a plus
- Tanium: Used for patching; deep experience not required since patch execution is handled by application teams, but familiarity with the tool is helpful
- ServiceNow: Current ticketing platform; integration target for RunZero







Certifications
No specific certifications required.
Hands on API development and vulnerability management platform experience matter more than credentials for this role.







Interview Process
Single round, approximately one hour screening interview. Quick turnaround expected on both the client and candidate side.







Notes for Recruiters
This is a narrowly scoped, implementation focused role rather than a general security engineer or analyst opening, which should help narrow the candidate pool efficiently.