Associate Information Security Engineer

Highmark Health

Associate Information Security Engineer supporting secure infrastructure, systems, and compliance for Highmark Health’s healthcare organization. Assisting with security systems, analysis, projects, and standards.

Posted 8/10/2026full-timeLouisiana, Maryland, North Carolina, Pennsylvania, Washington • 🇺🇸 United StatesJuniorMid-Level💰 $68,400 - $105,900 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in Information Security and Risk Management (ISRM) infrastructure, including the design, implementation, and compliance with security standards and policies. Proficient in conducting performance studies, root cause analysis, and delivering technical training in security concepts.

Highest-signal resume keywords

Information SecurityRisk ManagementOperating Systems AdministrationISRM Infrastructure DesignCompliance with HIPAA

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Information SecuritySystems AnalysisISRM Infrastructure DevelopmentTraffic AnalysisRoot Cause AnalysisSecurity Systems ImplementationSoftware AdministrationEncryptionVirtualization PlatformsSecure SDLC Best Practices

Soft Skills

TeamworkInterpersonal SkillsCommunicationProblem-Solving

Tools & Technologies

IPSFirewallsEndpoint ProtectionWeb/Email FilteringDLPSIEMMicrosoft Apps and SuitesWindows ServerSharePointITIL 3

Certifications & Qualifications

CISSPSecurity+CISACISMGSEC

Industry Keywords

HITRUST CSFNIST 800-83PCIHIPAAHITECHCOBITISO 27001/2IT Risk AdvisoryNetwork Security ArchitectureDatabase Management

Tech Stack

Tools & technologies

FirewallsIoTLinuxSDLC

About the role

Key responsibilities & impact

Assist with planning, researching, evaluating, designing, and developing Information Security and Risk Management (ISRM) infrastructure systems
Assist with design, development, and implementation of less complex ISRM infrastructure components, including operating systems, software tools, and utilities
Conduct less complex ISRM infrastructure performance studies and traffic analysis
Help determine systems design requirements and monitor successful implementation of system improvements
Assist with developing ISRM infrastructure engineering policies, standards, and procedures
Define requirements, deliverables, and timeframes with teams
Escalate issues and recommend resolutions to appropriate audiences
Conduct root cause analysis for complex ISRM infrastructure problems
Develop and/or deliver technical training in less complex technical areas
Complete project tasks for on-time, on-budget, in-scope delivery of ISRM infrastructure projects
Implement, monitor, configure, and maintain security systems
Assure compliance with required standards, procedures, guidelines, and processes
Perform other duties as assigned or requested

Requirements

What you’ll need

Bachelor's degree in Computer Science, Information Systems, or related field required
6 years of related and progressive experience may substitute for the Bachelor's degree
1 year of experience in information security and systems analysis
1 year of experience in information security, information risk management, and/or information technology
1 year of experience with operating systems and software administration
1 year of experience developing, communicating, and presenting information security and risk management concepts to varying audiences
1 year of experience with IPS, firewalls, endpoint protection, web/email filtering, DLP, digital rights management, encryption, SIEM, and virtualization platforms
Knowledge of HITRUST CSF, NIST 800-83, PCI, HIPAA, HITECH, COBIT, ISO 27001/2, and ITIL 3
Familiarity with secure SDLC best practices
Knowledge of Microsoft Apps and Suites, Windows Server, SharePoint, and related technologies
Strong teamwork and interpersonal skills
No language other than English required
Travel requirement: 0%–25%
Preferred: experience with HITRUST CSF or NIST 800-83, IT/information security risk advisory, network security architecture and protocols, database management, system administration, software development lifecycle, IoT/IoMT/OT security, MDM, Linux or Mac management, and modern Windows endpoint management tooling
Preferred certifications: CISSP, Security+, CISA, CISM, or GSEC
Must comply with HIPAA, company privacy and information security policies, Code of Business Conduct, applicable laws, regulations, and training requirements

Benefits

Comp & perks

Base pay range of $68,400.00–$105,900.00 per year
Remote/work-at-home location option as listed for Pennsylvania, Maryland, Washington, North Carolina, and Louisiana