Security Engineer IV

Job description

By joining Sedgwick, you'll be part of something truly meaningful. It’s what our 33,000 colleagues do every day for people around the world who are facing the unexpected. We invite you to grow your career with us, experience our caring culture, and enjoy work-life balance. Here, there’s no limit to what you can achieve.

Newsweek Recognizes Sedgwick as America’s Greatest Workplaces National Top Companies

Certified as a Great Place to Work®

Fortune Best Workplaces in Financial Services & Insurance

PRIMARY PURPOSE: The Security Engineer IV serves as a technical leader in the design, implementation, and optimization of secure solutions across the organization. This role is responsible for leading complex security projects, providing advanced incident response, and collaborating with cross-functional teams to ensure the integrity, confidentiality, and availability of systems and data. The Security Engineer IV proactively identifies and mitigates risks, develops and deploys advanced security technologies, and mentors junior staff. Drives continuous improvement and aligns solutions with organizational strategy and regulatory requirements, this position plays a critical role in strengthening the organization’s overall security posture.

We're seeking an AI Engineer to own the deployment and management of our AI governance and security tooling, including Credo AI for model governance and risk assessment and Palo Alto Prisma AIRS or similar for runtime AI security and threat detection. Partnering with security and compliance teams, you'll configure policies, monitor model risk, and ensure our AI systems meet internal standards and regulatory requirements. The ideal candidate pairs hands-on engineering skills with knowledge of AI risk frameworks and the emerging AI security landscape.

ESSENTIAL FUNCTIONS AND RESPONSIBILITIES

• Implements, monitors, and supports hardware, software, applications, managed solutions, and service provider relationships.
• Contributes to information security projects that evaluate existing infrastructure and propose strategic changes.
• Delivers projects on time, within budget, and in accordance with service level agreements (SLAs).
• Provides incident response and system stability support, including after-hours involvement as needed.
• Collaborates with architects, SOC, incident responders, infrastructure, and development teams to resolve security issues.
• Responds to and resolves service and escalation tickets, ensuring SLA compliance.
• Develops security test plans from architectural design, identify deficiencies, and implement enhancements to minimize production impact.
• Participates in change management and project meetings, providing expert guidance.
• Researches, validates, and deploys advanced security solutions to meet business and regulatory needs.
• Applies security engineering fundamentals and processes as outlined in NIST 800-160 and other relevant frameworks.
• Drives incident response and postmortem exercises, establishing measurable benchmarks and continuous improvement.
• Conducts performance testing and stress analysis of security solutions, ensuring business innovation is not hindered.
• Develops and implements technical solutions and new security tools to mitigate vulnerabilities and automate repeatable tasks.
• Leads troubleshooting efforts for compatibility issues between security tools and business applications.
• Analyzes client and customer needs, providing clear and concise reports to leadership.
• Works closely with management and project managers to ensure successful project delivery and stakeholder communication.
• Provides feedback and recommendations to improve IT Security processes and procedures.

 ADDITIONAL FUNCTIONS and RESPONSIBILITIES

• Performs other duties as assigned.
• Travel as required.

QUALIFICATIONS

Education & Licensing

Bachelor's degree in management information systems, computer science or another related field

Master’s degree in business administration or an IT related field.  Licenses as needed.

Experience

Five (5) years of experience in cybersecurity, with a strong background in system or network security engineering.

three (3) years of experience in a technical lead or senior engineering role.

Proven expertise in technology design, implementation, and delivery (preferred 4+ years’ IT experience in addition to cybersecurity).

Extensive knowledge of security controls and technologies, including SIEM, IDS/IPS, PKI, IDAM, antivirus, firewalls, EDR, threat intelligence platforms, security automation and orchestration, deception technologies, and application controls.

Experience managing SIEM systems, threat intelligence platforms, security automation and orchestration solutions, IDS/IPS, FIM, DLP, and other monitoring tools.

Experience with Application Control Listing Software, SIEM Solutions, XDR Solutions, and AI/ML technologies.

Experience researching and advising leadership on emerging security technologies.

CIS hardening and compliance with standards such as ISO 27001, NIST, PCI DSS, HIPAA, HITECH, SOX, GDPR, CIS, or SOC 2.

Skills & Knowledge

• Ability to work independently and solve complex problems as they arise
• Ability to handle confidential and sensitive information with integrity
• Commitment to continuous learning and professional development
• Strong collaboration and leadership skills
• Expertise in the CIA triad and IT Security frameworks
• CISSP (preferred); CISM and/or SANS certification or Security-related certifications a plus.

WORK ENVIRONMENT

When applicable and appropriate, consideration will be given to reasonable accommodations.

Mental:  Clear and conceptual thinking ability; excellent judgment, troubleshooting, problem solving, analysis, and discretion; ability to handle work-related stress; ability to handle multiple priorities simultaneously; and ability to meet deadlines

Physical:  Computer keyboarding, travel as required

Auditory/Visual:  Hearing, vision and talking

The statements contained in this document are intended to describe the general nature and level of work being performed by a colleague assigned to this description.  They are not intended to constitute a comprehensive list of functions, duties, or local variances.  Management retains the discretion to add or to change the duties of the position at any time.

Sedgwick is an Equal Opportunity Employer and a Drug-Free Workplace.

If you're excited about this role but your experience doesn't align perfectly with every qualification in the job description, consider applying for it anyway! Sedgwick is building a diverse, equitable, and inclusive workplace and recognizes that each person possesses a unique combination of skills, knowledge, and experience. You may be just the right candidate for this or other roles.