Back to results

Lead, Infrastructure Security Engineer

  • Allendale, NJ, United States
  • Leesburg, VA, United States

Applications open in a new tab.

Job details

Experience
4+ years of progressive experience in infrastructure security, security engineering, or related cybersecurity roles.
Posting language
English
Posted

Original job description

Location: Leesburg, VA or Allendale, NJ Company: VB Spine Looking for a career where your work truly matters? At VB Spine, you’ll be part of a mission-focused team that supports surgeons during life-changing spinal procedures. We’re looking for driven individuals ready to learn quickly, adapt under pressure, and grow in a dynamic, fast-paced environment.

As a Spine Sales Associate, you’ll own the security of VB Spine’s on-premises and physical infrastructure - including vulnerability management, Active Directory, servers, network infrastructure, and manufacturing/legacy environments.

The ideal candidate will partner closely with the Infrastructure team to harden the physical environment, drive vulnerability management end-to-end, and implement compensating controls for systems that cannot be patched or upgraded.

What You’ll Do:

Vulnerability Management

  • Own the vulnerability management lifecycle end-to-end - scanning, prioritization, remediation tracking, reporting, and exception management.
  • Deploy and maintain vulnerability scanning infrastructure, including credentialed scanning across servers, network devices, and endpoints.
  • Develop risk-based prioritization frameworks that account for asset criticality, exploit availability, and business context.
  • Build remediation tracking and SLA reporting processes in partnership with Infrastructure and IT teams.
  • Manage vulnerability exception and risk acceptance workflows.

On-Premises Infrastructure Security

  • Secure on-premises Active Directory - tiered administration model, GPO hardening, service account hygiene, privileged group management.
  • Implement and maintain secure configuration baselines for Windows and Linux servers (CIS Benchmarks, DISA STIGs, or equivalent).
  • Coordinate patching schedules and change management with Infrastructure, ensuring timely remediation without impacting operations.
  • Conduct security assessments for new infrastructure deployments and third-party integrations.

Network & Physical Environment Security

  • Implement and maintain network segmentation - VLANs, firewall policies, IDS/IPS, and access control lists.
  • Secure remote access infrastructure - VPN, jump boxes, privileged access management.
  • Partner with the Infrastructure team on network architecture reviews and security hardening.
  • Maintain documentation of network security architecture, diagrams, and configurations.

Legacy & Manufacturing Environment Security

  • Secure legacy and manufacturing floor environments that cannot be patched or upgraded - microsegmentation, compensating controls, risk acceptance documentation.
  • Implement monitoring for unmanaged and OT assets - device inventory, network isolation, anomaly detection.
  • Partner with Quality/Regulatory on FDA-validated system constraints and re-qualification requirements
  • Drive decommission planning for end-of-life systems.

What You Bring:

  • Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or related field preferred; equivalent professional experience or in-progress degree considered.
  • Industry certifications preferred: CISSP, CompTIA Security+, CySA+, GIAC (GSEC, GCSA), or equivalent.
  • 4+ years of progressive experience in infrastructure security, security engineering, or related cybersecurity roles.
  • Demonstrated vulnerability management experience - deployment and operation of scanning platforms (Tenable/Nessus, Qualys, or equivalent), credentialed scanning, and risk-based prioritization.
  • Strong Active Directory and Windows Server security knowledge - tiered administration, GPO, service account management, domain hardening.
  • Network security depth - segmentation, firewall management, IDS/IPS, VPN, and routing/switching security.
  • Experience with secure configuration baselines (CIS Benchmarks, DISA STIGs) and compliance scanning.
  • Medical device, healthcare, or regulated industry experience preferred.
  • Strong communication and collaboration skills.

Why VB Spine? We believe in growing talent from within. At VB Spine, you’ll get the training, mentorship, and support you need to build a strong foundation in the medical sales field. You’ll work alongside a high-performing team, gain valuable operating room experience, and take your first step toward a rewarding and meaningful career.

Compensation:

Pay for this role is competitive and based on experience, with additional factors like territory requirements, qualifications, and performance taken into account. The typical pay range for this position is $125 000 -135 000 annually, with potential for bonuses and incentives plus benefits.

VB Spine reserves the right to offer compensation outside of this listed range. Final compensation is determined on a case-by-case basis and considers a variety of factors including experience level, skillset, and market conditions.

Benefits include:

  • Comprehensive health, dental, and vision insurance
  • 401(k) with company match
  • Paid time off (PTO) and holidays
  • Ongoing training and professional development opportunities
  • Opportunity to grow within a fast-paced, dynamic company
More about this job

Skills

  • Sales
  • Microsoft Active Directory
  • Prioritization
  • Reporting
  • Microsoft Windows
  • Linux
  • Change management
  • IDS
  • IPS
  • VPN
  • Documentation
  • Cybersecurity
  • Computer science
  • Computer technology
  • CISSP
  • Security+
  • Tenable Nessus
  • Microsoft Windows Server
  • Regulatory compliance
  • Communication skills
  • Collaboration

Report this job