Information Security Engineer

At MGIC, we take pride in knowing that what we do matters. As pioneers of private mortgage insurance, we help people achieve homeownership sooner - making affordable low-down-payment mortgages a reality. Our efforts have helped more than 14 million people get the keys to their own homes sooner than otherwise possible. Every position is critical to our company's success - from the analytical to the technical; from the innovative to the operational. The customer-facing roles to behind-the-scenes experts, we're all part of one team. We're an organization with a national footprint that's large enough to never lack for a new challenge, but small enough for an opportunity to make an impact and influence decisions. Come make a difference at MGIC.

PURPOSEResponsible for executing the existing program while transforming and building a world class compliance and proactive security-focused Information Security program. Responsible for MGIC’s vulnerability information, intelligence, and risk mitigation collection, analysis, dissemination of information, and enforcement.

PRIMARY DUTIES AND RESPONSIBILITIESThe following statements describe the general nature of work performed by people assigned to this job, may not be performed by all individuals in this job, and are not a complete list of all job duties required.

• Supports all aspects of security system administration, vulnerability management, security systems and threat monitoring, and conducting day to day operations including all tiers of security support.

• Performs regular risk and security control assessments, analyze effectiveness, identify risk and control weaknesses and recommend remedial action.

• Applies critical and analytical thinking and techniques against security data and events to drive, evolve and advance security monitoring and threat detection and response.

• Develops, documents and maintains security architecture and plans, processes, procedures, including strategic, tactical and project plans to ensure that security issues are addressed throughout the project and system life cycle.

• Provides technical authority, vision, documentation of operational procedures and guidance to grow, manage, run and evolve the MGIC Vulnerability Management Program.

• Participates in initial discussions of new platforms, applications, and/or any significant addition to MGIC's information systems. Provides input in developing long- and short-term plans for providing necessary security design, controls and/or technologies.

• Participates in corporate disaster recover/business continuity planning team. Provides security representation on large enterprise projects.

• Creates and consolidates vulnerability status reporting from disparate sources, security incident and event data, unresolved network security exposures, misuse of information assets, noncompliance audit remediation to produce weekly and monthly exception and management reports.

• Researches and explores new security threats, vulnerability trends, alerts and recommends and implements remedial monitoring and actions.

• Develops, implements, and manages the overall enterprise information security strategy and associated architecture, solutions, policies, standards and guidelines.

• Provides support to the Computer Incident Response Team (CIRT) in the effective detection, analysis, and containment of attacks.

• Nature of business environment requires 24/7 availability.

PREFERENCESExperience with Snyk and Rapid 7

QUALIFICATIONS

• 3+ years of experience

• Education: Completion of a Bachelor’s Degree in Computer Science, Computer Security or Information Assurance. Additional years of related work experience (2) or equivalent hands-on experience.

Pay Range:$86,070.00 - $142,020.00*This range aligns with current market...