Security Engineer – Infrastructure Operations

🕒 July 24

🇺🇸 United States – Remote

💵 $90k - $125.5k / year

⏰ Full Time

🟡 Mid-level

🟠 Senior

👷 Infrastructure Engineer

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

11:11 SYSTEMS

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2020

💼 Consulting

🏥 Healthcare

📦 Logistics

Consulting • Healthcare • Logistics

11:11 Systems is a leading provider of cloud solutions, offering services that include managed public and private cloud, data protection, disaster recovery, and security. The company focuses on modernizing IT infrastructures for businesses, enhancing resilience against threats, and simplifying management through advanced technology. With over 40 years of experience, 11:11 Systems leverages its deep expertise to tailor solutions for diverse industries such as education, government, and healthcare, ensuring high levels of security and compliance for its clients.

📋 Description

• Lead and mature the design, implementation, and optimization of enterprise Vulnerability & Threat Management programs. • Operate and tune vulnerability scanning tools (e.g., Rapid7 InsightVM, Tenable, Qualys) across on-prem and cloud environments. • Analyze vulnerability data, prioritize remediation based on risk, exploitability, and business impact. • Integrate threat intelligence feeds and SIEM platforms to enhance detection and response capabilities. • Collaborate with infrastructure, network, and application teams to drive remediation efforts and reduce risk exposure. • Align vulnerability management processes with compliance frameworks (NIST 800-53, CIS Benchmarks, PCI-DSS, ISO 27001), including audit preparation and evidence collection. • Automate vulnerability remediation and reporting workflows using PowerShell, Ansible, or similar tools. • Perform root cause analysis of recurring vulnerabilities and recommend long-term mitigation strategies. • Support and validate patch management processes (WSUS, Automox), ensuring timely remediation aligned with SLAs and compliance requirements. • Develop, define and enforce policies and procedures surrounding secure configuration baselines in accordance with CIS benchmarks and established best practices. • Generate compliance and risk posture reports and dashboards as required. • Lead incident response and threat hunting activities and define processes. • Leverage AI in daily activities to enhance our ability to assess, identify and remediate emerging threats and existing vulnerabilities.

🎯 Requirements

• 5+ years of experience in cybersecurity, with a strong focus on vulnerability and threat management. • Hands-on experience with vulnerability management platforms (Rapid7 InsightVM preferred). • Strong understanding of CVSS scoring, exploit frameworks, and risk-based prioritization. • Experience managing enterprise Windows and Linux environments. • Strong understanding of virtualization platforms (VMware vSphere/ESXi/VCF) and cloud platforms (AWS, Azure). • Scripting and automation experience (PowerShell, Python, Bash, or Ansible). • Knowledge of network security concepts (firewalls, IDS/IPS, segmentation). • Experience with SIEM tools used for correlating and reporting. (Rapid7 Insight DR, FortiSIEM) • Experience managing endpoint protection tools (Symantec Endpoint Protection, Defender, Trend VisionOne). • Practical experience in Penetration testing and/or red team/blue team activities (network, infrastructure, and/or web applications) and tools used in these activities. • Knowledge of OWASP Top 10 and common web application security risks. • Familiarity with container and Kubernetes security. • Relevant certifications (CISSP, CEH, GIAC, or equivalent). • Must be able to work in the US without a visa sponsorship.

🏖️ Benefits

• Comprehensive healthcare plan options • Retirement plan with company match • Life, other supplemental insurances • Paid time off and company holidays • New Parent Leave • Wellness programs