Information Security Engineer

Responsible for the planning, design, and implementation of security architectures. Perform technical and complex duties in the areas of network security management, risk management, incident management, vulnerability management, information security program and technology implementations.

Review network and computer security to identify deviations from documented standards

Ensure security infrastructure is built to meet security and availability requirements

Builds and maintains infrastructure to comply with legal, regulatory, and contractual requirements

Schedules and executes implementation plans under the guidance of Senior Information Security Engineers

Identifies changes to security infrastructure to best address a shifting threat environment and dynamic attack surface

May participate in the investigation of intrusion incidents and conduct forensic investigations

Job Specifications

Typically has the following skills or abilities:

Bachelor’s Degree in Computer Science or related field or equivalent experience

4+ years of hands-on technical information security experience

Advanced knowledge of security principles and technologies

2+ years of hands-on experience designing and implementing a variety of security solutions and technologies

Experience with risk and threat assessment methodologies

Ability to weigh business needs against risk concerns and articulate issues to business leaders

Experience implementing security controls to comply with various IT regulatory compliance

requirements such as HIPAA and PCI, as well as various standards including ISO 27001

Progressive skills and ability to identify and analyze security vulnerabilities

Experience performing network and application security penetration testing and/or vulnerability management, interpreting results and remediating findings

Ability to interact with personnel at all levels of the organization and interpret business initiatives

Excellent written and verbal communication skills

Ability to regularly exercise discretion and independent judgment in the performance of his/her job duties

For roles that are remote (i.e., Work From Home (WFH)) or hybrid (i.e., partial onsite at a VSP location and WFH), must demonstrate a high level of engagement in virtual environments, including maintaining camera presence during meetings to support effective communication and team alignment

#LI-VISIONCARE

Compensation range for the role is listed below. Applicable salary ranges may differ across markets. Actual pay will be determined based on experience and other job-related factors permitted by law. As a part of the compensation package, this role may include eligible bonuses and commissions. For more information regarding VSP Vision benefits, please click here .

Salary Ranges: $72,450.00 - $125,475.00

VSP Vision is an equal opportunity employer and gives consideration for employment to qualified applicants without regard to age, gender, race, color, religion, sex, national origin, disability or protected veteran status . We maintain a drug-free workplace and perform pre-employment substance abuse testing.

Unincorporated LA County Residents: Qualified Applicants with arrest or conviction records will be considered for employment in accordance with the Los Angeles County Fair Chance Ordinance for Employers and the California Fair Chance Act, and any other similar laws.

Notice to Candidates: Fraud Alert - Fake Job Opportunity Solicitations Used to Collect Fees/Personal Information.

We have been made aware that fake job opportunities are being offered by individuals posing as VSP Vision and affiliate recruiters. Click here to learn about our application process and what to watch for regarding false job opportunities.

As a regular part of doing business, VSP Vision (“VSP”) collects many different types of personal information, including protected health information, about our audiences, including members, doctors, clients, brokers, business partners, and employees.  VSP Vision employees will have access to this sensitive personal information and are subject to follow Information Security and Privacy Policies.