{"id":3061854,"url":"https://alion.io/job/medimpact-it-security-engineer-ii","title":"IT Security Engineer II","company":{"id":2093547,"name":"Medimpact","domain":"medimpact.com","url":"https://alion.io/company/medimpact-com","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["San Diego, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":110982,"max":155376,"currency":"USD","period":"year","gross":null,"usd_annual":155376},"salary_estimate":null,"experience_years_min":8,"visa_sponsorship":true,"relocation_package":false,"has_equity":false,"technologies":[{"name":"HIPAA","optional":false},{"name":"Linux","optional":false},{"name":"Microsoft Office","optional":false},{"name":"OWASP","optional":false},{"name":"SOC 2","optional":false},{"name":"Trend Micro","optional":false},{"name":"Unix","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-25T00:00:00Z","employer_posted_date":"2026-08-25","last_verified_at":"2026-10-22T11:08:56Z","board_verified":false,"closed_at":null,"days_open":61,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":61},"description":"Exemption Status:\nUnited States of America (Exempt)$110,982 - $155,376 - $199,769“Pay scale information is not necessarily reflective of actual compensation that may be earned, nor a promise of any specific pay for any selected candidate or employee, which is always dependent on actual experience, education, qualifications, and other factors. A full review of our comprehensive pay and benefits will be discussed at the offer stage with the selected candidate.”\nThis position is not eligible for Sponsorship.\nMedImpact Healthcare Systems, Inc. is looking for extraordinary people to join our team!\nWhy join MedImpact? Because our success is dependent on you; innovative professionals with top notch skills who thrive on opportunity, high performance, and teamwork. We look for individuals who want to work on a team that cares about making a difference in the value of healthcare.\nAt MedImpact, we deliver leading edge pharmaceutical and technology related solutions that dramatically improve the value of health care. We provide superior outcomes to those we serve through innovative products, systems, and services that provide transparency and promote choice in decision making. Our vision is to set the standard in providing solutions that optimize satisfaction, service, cost, and quality in the healthcare industry. We are the premier Pharmacy Benefits Management solution!\nJob Description\nThe Information Security Engineer II develops, executes, and monitors enterprise-wide information security from policy through implementation across all Security departments including SECOPS, DEVSECOPS and Threat Analytics. This position expands the duties of the Security Engineer I to include direct security support for departments in corporate subsidiaries with identified areas of need which require experienced oversight. This position is required to ensure that business information is secure from unauthorized access, protected from inappropriate alteration, and is physically secure. This “hands-on” position serves as the process owner for all ongoing security activities and is responsible for the protection of the confidentiality and integrity of client, employee, and proprietary business information in accordance with federal/state laws and regulations. Enforcement of and adherence to MedImpact’s corporate policies and procedures is required by all Security team members.\nEssential Duties and Responsibilities include the following. Other duties may be assigned.\nEnforces policy and supports security procedures, applications, and systems through the documentation of the resolution of assigned cases that range from simple to complex. Recommends changes to existing security process and procedures.\nAbility to utilize Endpoint Threat Detection and Response/Hunting toolsets\nCreates requirements for product evaluations and/or procedures to enhance productivity and effectiveness. Provides direct support to the business and IT staff for security related issues.\nDrives the delivery of new and upgraded security applications, systems, and workflow. Tests new systems for effective operations.\nLeads efforts to proactively maintain and improve the automation, reliability, consistency, and the quality of existing IT security tools and environments throughout the organization. Assists in the design, deployment, integration and configuration of security solutions or enhancements to ensure functionality.\nEnsures the confidentiality, integrity, and availability of data residing on or transmitted to, from, or through the enterprise workstations, servers, application systems, and data repositories.\nInitiates, facilitates, and promotes activities to create information security awareness. Disseminates and educates users on security policies and practices. Participates in regular security awareness training and updates to ensure consistent compliance with IT Security Policies.\nWorks cross-functionally and interacts with internal business units and stakeholders to support the business’ needs. Using an automated customer case request system, tracks and documents security service requests and completed cases.\nParticipates in daily activities and reporting required for regulatory and contractual information security obligations. Coordinates tasks that are performed within the infrastructure (system administration, network administration, application support, etc.) for security updates and initiatives. Performs analysis, design and development of security features for system architecture.\nParticipates in security incident investigations and provides on-going communication to security management. Identifies root causes of security events and proposes solutions; closes out and documents investigations. Ensures confidentiality and appropriate personnel are involved in the investigation.\nMaintains up-to-date industry knowledge through formal/informal training, industry associations and research of latest technologies critical to the success of the company’s information security program. Continuously works to identify and improve security solutions to defend the company against data security threats.\nApprises and keeps management aware of security issues; handles and/or escalates issues appropriately.\nProvides guidance/training to less experienced staff.\nApprises and keeps management aware of security issues; handles and/or escalates issues appropriately.\nProvides IT Security consultative support to internal and external clients.\nManages IT Security related projects and assignments as assigned. \nSupervisory Responsibilities\nNo supervisory responsibilities\nClient Responsibilities\nThis is an internal and external client facing position that requires excellent customer service skills and interpersonal communication skills (listening/verbal/written). One must be able to; manage difficult or emotional client situations; Respond promptly to client needs; Solicit client feedback to improve service; Respond to requests for service and assistance from clients; Meet commitments to clients.\nQualifications\nTo perform this job successfully, an individual must be able to perform each essential duty satisfactorily. The requirements listed below are representative of the knowledge, skill, and/or ability required. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.\nEducation and/or Experience\nBS/BA and 8+ years’ experience or equivalent combination of education and experience, and 4 years of SME in respective areas\nComputer Skills\nTo perform this job successfully, an individual should have knowledge of Microsoft Office Suite.\nAdditional expertise is required in the following:\nEndpoint Management Experience (BigFix, WSUS/SCCM, Symantec, Trend Micro, etc)\nIdentity and Access Management\nCertificate Management\nPatch Management (Windows and Unix)\nIntrusion Detection and Prevention\nSecurity Awareness Training\nMobile Device Management\nEDR (Endpoint detection and response)\nWeb Content Filtering\nDevice Encryption\nVulnerability Assessment Tools\nFirewall and VPN\nSecure E-mail, Anti-SPAM\nWebserver applications\nWeb API Service Security\nBusiness Continuity (Disaster Recovery)\nCompliance and Audit (HIPAA, HITRUST, SOC, GovRAMP and PCI a plus)\nOS Administration (Windows, Linux and Unix)\nAuthentication and SSO\nContainer Security\nCertificates, Licenses, Registrations\nSecurity Certification strongly preferred\nOWASP, ISSA, ISACA membership a plus\nOther Skills and Abilities\nMust have excellent analytical, problem solving and communication skills. Familiarity with SSAE SOC 1 and SOC 2, HITRUST, federal/state security and privacy frameworks, HIPAA, PCI and regulatory requirements for information security. Must be able to work on a team and build good working relationships with team members and internal clients.\nMust have good understanding of standard policies and procedures for information security.\nReasoning Ability\nAbility to solve practical problems and deal with a variety of concrete variables in situations where only limited standardization exists.\nAbility to define problems, collect data, establish facts, and draw valid conclusions.\nMathematical Skills\nAbility to apply concepts such as fractions, percentages, ratios, and proportions to practical situations.\nAbility to add, subtract, multiply, and divide in all units of measure, using whole numbers, common fractions, and decimals. Ability to compute rate, ratio, and percent and to draw and interpret bar graphs.\nLanguage Skills\nAbility to respond to common inquiries or complaints from customers, regulatory agencies, or members of the business community.\nAbility to respond effectively to the most sensitive inquiries or complaints. \nCompetencies To perform the job successfully, an individual should demonstrate the following competencies:\nComposure\nDecision Quality\nOrganizational Agility\nProblem Solving\nCustomer Focus\nDrive for Results\nPeer Relations\nTime Management\nDealing with Ambiguity\nLearning on the Fly\nPolitical Savvy\nPhysical Demands\nThe physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.\nWhile performing the duties of this Job, the employee is regularly required to sit and talk or hear. The employee is regularly required to stand; walk; use hands to finger, handle, or feel and reach with hands and arms. The employee must occasionally lift and/or move up to 25 pounds.\nWork Environment\nThe work environment characteristics described here are representative of those an employee encounters while performing the essential functions of this job. Reasonable accommodation may be made to enable individuals with disabilities to perform the essential functions.\nThis position may regularly be exposed to or encounter moving mechanical parts, high, precarious places, fumes or airborne particles, toxic or caustic chemicals, outdoor weather conditions, risk of electrical shock or vibration. The noise level in the work environment is usually moderate (examples: business office with computers and printers, light traffic).\nWork Location\nThis position must work on-site at the San Diego Headquarters for purposes of providing adequate support to internal clients; being available for face-to-face interactions and coordination of work with other employees, colleagues, clients, or vendors; as well as for facilitation of quick and effective decisions through collaboration with stakeholders. Remote work is not an option for these purposes.\nWorking Hours\nThis is an exempt level position requiring the incumbent to work the hours required to fully accomplish job responsibilities and reasonably meet deadlines for work deliverables. The individual must have the flexibility to work beyond traditional hours and be able to work nights, at weekends or on holidays as required. Work hours may be changed from time to time to meet the needs of the business. Typical core business hours are Monday through Friday from 8:00am to 5:00pm.\nTravel\nThis position requires domestic travel of up to 10% of the time.\nThe Perks:\nMedical / Dental / Vision / Wellness Programs\n\nPaid Time Off / Company Paid Holidays\n\nIncentive Compensation\n\n401K with Company match\n\nLife and Disability Insurance\n\nTuition Reimbursement\n\nEmployee Referral Bonus\n\nTo explore all that MedImpact has to offer, and the greatness you can bring to our teams, please submit your resume to www.medimpact.com/careers\nMedImpact, is a privately-held pharmacy benefit manager (PBM) headquartered in San Diego, California. Our solutions and services positively influence healthcare outcomes and expenditures, improving the position of our clients in the market. MedImpact offers high-value solutions to payers, providers and consumers of healthcare in the U.S. and foreign markets.\nEqual Opportunity Employer, Male/Female/Disabilities/Veterans\nO...","description_format":"text","description_chars":12629,"description_truncated":true,"requirements":{"experience_years_min":8,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["401k plan","Wellness"],"hiring_locations":[{"name":"United States","iso":"US","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-10-22T06:47:06Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.554,"p_room":0.28,"age_days":60,"expected_fill_days":25,"reasons":["conf:42","velocity","win:tail","crowd:"],"computed_at":"2026-10-24T06:02:35Z"},"pay":{"stated_usd_annual":155376,"is_top_pay":true},"html_url":"https://alion.io/job/medimpact-it-security-engineer-ii","json_url":"https://alion.io/job/medimpact-it-security-engineer-ii.json","meta":{"generated_at":"2026-10-25T04:47:17Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":6386,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-26T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":2093547},"rest":"https://alion.io/mcp/rest/get_company?id=2093547"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fmedimpact-it-security-engineer-ii"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fmedimpact-it-security-engineer-ii"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fmedimpact-it-security-engineer-ii"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/medimpact-it-security-engineer-ii\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fmedimpact-it-security-engineer-ii"}]}