Cybersecurity Threat Intelligence Engineer II

Workforce Classification:

Join Our Team: Do Meaningful Work and Improve People’s Lives 

Our purpose, to improve customers’ lives by making healthcare work better, is far from ordinary. And so are our employees. Working at Premera means you have the opportunity to drive real change by transforming healthcare.

To better serve our customers, we are fostering a culture that emphasizes employee growth, collaborative innovation, and inspired leadership. We are dedicated to creating an environment where employees can excel and where top talent is attracted, retained, and thrives. As a testament to these efforts, Premera has been recognized on the 2025 America's Dream Employers list. Newsweek honored Premera as one of America's Greatest Workplaces, America's Greatest Workplaces for Inclusion, and America's Greatest Workplaces For Mental Well-Being, Forbes ranked Premera among America’s Best Midsize Employers for the fourth time.

Learn how Premera supports our members, customers and the communities that we serve through our Healthsource blog:  https://healthsource.premera.com/.

The Cybersecurity Threat Intelligence Engineer II is a member of the Threat Intelligence and Response Team. In this position, you will be responsible for responding to cybersecurity incidents, using critical thinking skills and forensic analysis to ensure that cybersecurity threats are proactively stopped from the Premera network. These threats include actors from Nation State, Cyber-criminal organizations, and Insider Threats. This job is also instrumental in the overall Security Awareness Program where written communication and public speaking to all employees is common.

This is a hybrid role, located on our campus in Mountlake Terrace, Washington.

What you’ll do:

• Apply advanced understanding HITRUST engineering and controls standards.

• Perform risk and severity assessment on cybersecurity events and incidents and then properly escalate or manage in accordance with experience and current processes.

• Act as a technical contributor with advanced knowledge and experience in one or more areas:

  • PICERL (Planning, Investigation, Containment, Eradication, Lessons Learned) process

  • HR related Investigative and Legal Processes

  • Conflict resolution and Clear Partnership

• Analyze gaps found in hunting exercises and minimize the overall threat landscape.

• Set the tempo, priorities, and proper workflow of the team in the day-to-day operations.

• Review and report to the team IT security threat assessments for major changes to systems, applications, and networks. This requires applying knowledge of vulnerability assessment and penetration testing tools.

• Maintain current expertise in security hacks and network penetration methods. Define and document defensive tactics. Define and oversee implementation plans for security configuration changes.

• Provide advanced technical analysis and evidence capture as Level 3 technical support for security incident response.

• Define IT policies, standards, and procedures to assure technical compliance with enterprise security policies and promote consistent use of best practices in information security. This includes regulatory standards such as SOX, HIPAA, PCI, GLBA, and various state and federal privacy laws.

• Mentor and guide junior Information Security Engineers in day-to-day operations and tasks.

• Exhibit leadership skills and be able to perform duties with little or no supervision.

What you’ll bring:

Required Qualifications

• Bachelor’s Degree in Information Systems or Business Administration or (4) years of experience.

• (3) years of experience designing, implementing, and troubleshooting networked computer systems, including systems integration, hardware requirements and networ