Job Description

Fulll-time, 40 Hours/week

M-F Days

Remote

The Security Engineer is an integral part of the Cybersecurity program. This position assists with developing and execution of security measures to protect information, network infrastructure and computer systems. This position conducts vulnerability assessments, risk assessments and works with appropriate individuals to eliminate or reduce the impact of any findings. This position works with internal customers, security partners and vendors as appropriate to complete their duties.

Responsibilities:

1. Assists with the implementation, execution and continuous improvement of the Information Security Program including but not limited to: Vulnerability Management, Risk Management Security Controls and Technical Oversight, Policy Document Maintenance, and user education
2. Maintains information security policies, procedures, and standards.
3. Conducts periodic risk analysis and risk management assessments.
4. Develops and coordinates application security reviews and is responsible for vulnerability and incident management.
5. Assists with the evaluation, selection, and implementation of information security tools.
6. Designs computer security strategy and engineer comprehensive cybersecurity architecture.
7. Identifies, defines and documents system security requirements and recommend solutions to management.
8. Configures, troubleshoots and maintains security infrastructure software and hardware.
9. Installs software that monitors systems and networks for security breaches and intrusions.
10. Monitors systems for irregular behavior and set up preventive measures.
11. Educates and trains staff on information system security best practices.
12. Ability to problem solve/remediate in a highly complex and matrixed environment.
13. Ability to successfully work in a fast-paced environment with a variety of personalities and work styles.
14. Ability to successfully work well under pressure with tight deadlines and with a sense of urgency.
15. Possess excellent written, oral, and active listening skills.
16. Other duties as required.

Other information:

Technical Expertise

1. Experience in HIPAA, HITECH, PCI, NIST, and other frameworks is preferred.
2. Experience in securing information system technologies is required.
3. Experience with both Technical Security and Governance, Risk and Compliance (GRC) is strongly preferred.
4. Experience working with all levels within an organization is required.
5. Experience in healthcare is preferred.
6. Proficiency in MS Office [Outlook, Excel, Word] or similar software is required.
7. In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
8. Experience with an organization's privacy and security due diligence efforts when entering into third party relationships or M&A activities a plus.
9. Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix
10. Knowledge of applications, databases, middleware to address security threats against the same.
11. Proficient in preparation of reports, dashboards and documentation
12. Excellent communication skills
13. Ability to handle high pressure situations with key stakeholders
14. Good Analytical skills, Problem solving and Interpersonal skills
15. Ability to adapt and thrive in a dynamic work environment. Exceptional organization skills, ability to work independently as well as part of a team, and demonstrated experience in taking initiative and following up on tasks.
16. Proficiency in MS Office [Outlook, Excel, Word, Visio, and SharePoint] or similar software is required.
17. Familiar with cloud platforms (e.g. AWS, Azure, etc)

Education and Experience

1. Education: College degree in related field and 3 years' experience or Highschool education and 5 years' experience required.
2. Security Certification Preferred: CEH, CISSP, GCIH, GSEC, or similar level security certification

Full Time

FTE: 1.000000

Status: Remote