Senior Threat & Vulnerability Management Engineer

Description

Medica is a nonprofit health plan with more than a million members that serves communities in Minnesota, Nebraska, Wisconsin, Missouri, and beyond. We deliver personalized health care experiences and partner closely with providers to ensure members are genuinely cared for.

We're a team that owns our work with accountability, makes data-driven decisions, embraces continuous learning, and celebrates collaboration - because success is a team sport. It's our mission to be there in the moments that matter most for our members and employees. Join us in creating a community of connected care, where coordinated, quality service is the norm and every member feels valued.

As a Senior Threat and Vulnerability Management (TVM) Engineer on Medica's Cyber Security team, you will be responsible for identifying, assessing, and driving remediation of vulnerabilities across Medica's on-premise and cloud environments. Your work will directly support the organization's risk reduction efforts and security maturity through proactive vulnerability discovery, threat modeling, and continuous improvement of detection and response capabilities. Performs other duties as assigned.

Key Accountabilities

• Conduct vulnerability research to identify and assess potential security flaws, followed by penetration testing to confirm exploitability.
• Monitor threat intelligence feeds for new vulnerabilities and assess their impact on the organization
• Maintain documentation and dashboards to track vulnerability status and remediation progress
• Collaborate with Internal Security teams, Product Owners, Scrum Masters, and management
• Find innovative solutions to problems to maintain a secure environment.

Candidates should have a strong understanding of vulnerability management frameworks, system hardening, secure configuration baselines, threat intelligence, and risk prioritization. Familiarity with tools such as Qualys, Tenable, or Rapid7, as well as cloud-native security services, is essential. The ability to think critically, correlate threat data with asset risk, and communicate findings effectively to both technical and non-technical stakeholders is highly valued by our team.

Required Qualifications

Preferred Qualifications

This position is an Office role, which requires an employee to work onsite at our Minnetonka, MN office, on average, 3 days per week.

The full salary grade for this position is $100,200 - $171,700. While the full salary grade is provided, the typical hiring salary range for this role is expected to be between $100,200 - $135,945. Annual salary range placement will depend on a variety of factors including, but not limited to, education, work experience, applicable certifications and / or licensure, the position's scope and responsibility, internal pay equity and external market salary data. In addition to base compensation, this position may be eligible for incentive plan compensation in addition to base salary. Medica offers a generous total rewards package that includes competitive medical, dental, vision, PTO, Holidays, paid volunteer time off, 401K contributions, caregiver services and many other benefits to support our employees.

The compensation and benefits information is provided as of the date of this posting. Medica's compensation and benefits are subject to change at any time, with or without notice, subject to applicable law.

We are an Equal Opportunity employer, where all qualified candidates receive consideration for employment indiscriminate of race, religion, ethnicity, national origin, citizenship, gender, gender identity, sexual orientation, age, veteran status, disability, genetic information, or any other protected characteristic.

Equal Opportunity Employer / Protected Veterans / Individuals with Disabilities

This employer is required to notify all applicants of their rights pursuant to federal employment laws.

For further information, please review the Know Your Rights notice from the Department of Labor.