We are looking for a detail-oriented individual to drive quality-related security work for Sinclair’s Information Security program. You will fill the role of Information Security Engineer with a focus on supporting an enterprise Vulnerability Management program. You will apply security in-depth principles to reduce vulnerability risk for Sinclair’s business units, cloud, and infrastructure environments. You will partner with internal stakeholders and consultants to develop security solutions to protect the confidentiality and integrity of Sinclair’s sensitive data. You will also work closely with security operations, engineering, to drive risk reduction across Sinclair’s enterprise.
Responsibilities:
Processes & Execution
- Manage processes and solutions pertaining to vulnerability management, application security, CIS benchmarks, and other security services as required.
- Excellent communication skills with an ability to effectively and professionally collaborate with company stakeholders and business partners.
- Ability to think strategically, plan methodically, and execute tactically.
- Take ownership of professional development and training needed to excel in your role.
- Lead initiatives to develop and mature vulnerability management services as they apply to team and organizational goals.
- Act as an advocate for Information Security objectives while identifying creative solutions to ensure progress is made.
- Drive remediation activities by understanding the impact of findings and developing communication channels with key stakeholders.
Engineering, Collaboration & Partnerships
- Maintain knowledge of current trends, recent publications, and emerging technologies as they pertain to risk and vulnerability management.
- Identify, prioritize, communicate, and mitigate security risks for on-premises and hybrid/multi-cloud environments.
- Produce frequent metrics to measure the efficacy and effectiveness of the vulnerability program.
- Identify business critical systems and environments including mapping data types in enterprise assets, databases, cloud environments, and applications.
- Work with outside vendors and consultants to identify tools to meet or exceed department needs.
- Demonstrate good judgment in identifying and solving problems that aligns with team and corporate goals.
- Enforce compliance with company policies and standards.
- Contribute to the vulnerability management program by driving remediation activities pertaining to application (DAST) scans, security assessments, vulnerability scans, or risk management activities and tools.
- Configure and tune security tools to identify weaknesses in systems, applications, databases, and cloud environments.
Performance Improvement
- Help the security team to maintain a level of excellence.
- Develop and evaluate performance metrics to establish process success.
- Design, document, and implement procedures and techniques that are consistent with best practices for analyzing and evaluating the risk (software & business), accuracy, completeness, internal integrity/consistency, testability, and overall quality of the system.
- Research emerging technologies and identify opportunities for adoption within vulnerability management and application security.
- Track progress for vulnerability management related processes, and constantly look for ways to make things work better, faster, and smoother.
- Collaborate on and adhere to security engineering standards, methodologies, and sustainable processes.
Qualifications:
- Associate’s degree in IT discipline, equivalent work experience, or equivalent IT certifications.
- 3+ years of experience with vulnerability management, system and application scanning, coordinating remediation efforts, and building partner relationships to achieve programmatic success.
- 4+ years of experience taking ownership of project, enhancement, or other assignments and seeing the process through to completion.
- Experience with all the main cloud vendors (Amazon Web Service, Azure, Google Cloud Platform)
- Understanding of applying security controls to operating systems, cloud environments, databases, and applications.
- Hands of experience using vulnerability scanning tools and driving remediation at an enterprise level (Qualys, Tanium, Bitsight, etc.).
- Experience using Asset Management and Reporting Platforms.
- Experience creating weekly metrics for vulnerability and risk reduction reporting.
- Professional level security certifications preferred (e.g., Security+, Network+, CISSP, CEH, CISM)
- Familiarity with security industry standards (ISO 27001, NIST 800-53 series, etc.) and best practices to implement control frameworks.
- Working knowledge of network and/or security technologies
- Other requirements as needed.
Please note that this position is not eligible for visa sponsorship, including employer sponsorship for an H-1B visa, OPT-STEM employment, etc.
The base salary compensation range for this role is $105,000 to $135,000. Final compensation for this role will be determined by various factors such as a candidates’ relevant work experience, skills, certifications, and geographic location. Full time positions are eligible for benefits that include participation in a retirement plan, life and disability insurance, health, dental and vision plans, flexible spending accounts, sick leave, vacation time, personal time, parental leave and employee stock purchase plan.
Sinclair is proud to be an equal opportunity employer and a drug free workplace. Employment practices will not be influenced or affected by virtue of an applicant's or employee's race, color, religion, sex (including pregnancy, gender identity, and sexual orientation), national origin, age, disability, genetic information, military or veteran status or any other characteristic protected by law.
About Sinclair:
Sinclair, Inc. (Nasdaq: SBGI) is a diversified media company and a leading provider of local news and sports. The Company owns, operates and/or provides services to 177 television stations in 79 markets affiliated with all major broadcast networks; owns Tennis Channel, the premium destination for tennis enthusiasts; and multicast networks CHARGE, Comet, ROAR and The Nest. Sinclair’s AMP Media produces a growing portfolio of digital content and original podcasts. Additional information about Sinclair can be found at www.sbgi.net.
About the Team
The life-blood of our organization is our people. We have a compelling story, a goal-oriented culture, and we take really good care of people. How good? Here is a glimpse: great benefits, open-door policy, upward mobility and a strong desire to see you succeed. Ready to be part of a winning team? Let’s talk.
Skills Required
- Associate's degree in an IT discipline, equivalent work experience, or equivalent IT certifications
- 3+ years of experience with vulnerability management, system and application scanning, remediation coordination, and partner relationship management
- 4+ years of experience owning projects, enhancements, or other assignments through completion
- Experience with Amazon Web Services, Microsoft Azure, and Google Cloud Platform
- Understanding of security controls for operating systems, cloud environments, databases, and applications
- Hands-on experience with enterprise vulnerability scanning tools such as Qualys, Tanium, or BitSight
- Experience with asset management and reporting platforms
- Experience creating weekly vulnerability and risk reduction metrics
- Professional security certification such as Security+, Network+, CISSP, CEH, or CISM
- Familiarity with ISO 27001, NIST 800-53, and security control frameworks
- Working knowledge of network and security technologies
Sinclair Broadcast Group Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Sinclair Broadcast Group and has not been reviewed or approved by Sinclair Broadcast Group.
-
Healthcare Strength — Health, dental, vision, mental health support, telehealth, and employer-paid life and long-term disability are described as broad and solid. Feedback suggests coverage starts relatively early for full-time employees and provides strong baseline security.
-
Retirement Support — A 401(k) with company match and an Employee Stock Purchase Plan are part of the standard package. Feedback suggests these programs contribute meaningful long-term financial support.
-
Leave & Time Off Breadth — Paid time off, parental leave, holidays, sick leave, and personal days are outlined as part of the offering. Job postings indicate a structured PTO allotment that appears reasonable for a large employer.
Sinclair Broadcast Group Insights
What We Do
Sinclair Broadcast Group, Inc. is one of the largest and most diversified television broadcasting companies in the country. Sinclair owns and operates, programs or provides sales services to more television stations than anyone and has affiliations with all the major networks. In addition, Sinclair is the leading local news provider in the country, as well as a producer of sports content. Sinclair owns a multicast network, four radio stations and a cable network. Sinclair’s broadcast content is delivered via multiple-platforms, including over-the-air, multi-channel video program distributors, and digital platforms. Sinclair, either directly or through its venture subsidiaries, makes equity investments in strategic companies. Sinclair Broadcast Group, Inc. was founded in 1986, went public in 1995 and is traded on the NASDAQ Global Select Market under the ticker symbol SBGI. Throughout our history, Sinclair Broadcast Group has been at the forefront of industry-changing events and technological advances. Our vision and first-to-market mentality drives our ‘next generation’ thinking; stimulating conversations, innovating through our expertise, and advocating for the development of technology and evolving business models. As a leading over-the-air broadcast television company, our primary business is to engage consumers on multiple platforms with relevant and compelling news, entertainment and sports content, and to provide advertisers and business efficient means and value to connect with our mass audiences. We recognize the vital role broadcast television plays in branding and local content delivery, and therefore strive to constantly be at the forefront of leading edge technology and structures to advance the industry.
