Sr Security Engineer

Summary:

The Sr Security Engineer is an integral part of the Cybersecurity program. This position will be responsible for maturing the Risk Management, and Incident response areas. This will be accomplished by conducting risk assessment of third parties, systems & equipment being placed on the network and cloud systems. Incident Response duties include organizing table top exercise and working with other staff on remediation of gaps identified. Day to day this position will interface with staff at all levels of the organization.

Responsibilities:

1. Assists with the implementation, execution and continuous improvement of the Information Security Program including but not limited to: Policy and Document Maintenance, Risk Assessment, Security Controls and Technical Oversight.
2. Maintains information security policies, procedures, and standards.
3. Conducts periodic risk analysis and risk management assessments.
4. Develops and coordinates application security reviews and is responsible for vulnerability and incident management.
5. Responsible for evaluation, selection, and implementation of information security tools.
6. Ability to problem solve/remediate in a highly complex and matrixed environment.
7. Ability to successfully work in a fast-paced environment with a variety of personalities and work styles.
8. Ability to successfully work well under pressure with tight deadlines and with a sense of urgency.
9. Possess excellent written, oral, and active listening skills.
10. Other duties as required.

Requirements

Other information:

Technical Expertise

1. Experience in HIPAA, HITECH, PCI, NIST, and other frameworks is required.
2. Experience in securing information system technologies is required.
3. Experience with both Technical Security Engineer and Governance, Risk and Compliance (GRC) is strongly preferred.
4. Experience working with all levels within an organization is required.
5. Experience in healthcare is preferred.
6. Proficiency in MS Office [Outlook, Excel, Word] or similar software is required.
7. In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
8. Experience with an organization's privacy and security due diligence efforts when entering into third party relationships or M&A activities a plus.
9. Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix
10. Knowledge of applications, databases, middleware to address security threats against the same.
11. Proficient in preparation of reports, dashboards and documentation
12. Excellent communication and leadership skills
13. Ability to handle high pressure situations with key stakeholders
14. Good Analytical skills, Problem solving and Interpersonal skills
15. Ability to adapt and thrive in a dynamic work environment. Exceptional organization skills, ability to work independently as well as part of a team, and demonstrated experience in taking initiative and following up on tasks.
16. Proficiency in MS Office [Outlook, Excel, Word, Visio, and SharePoint] or similar software is required.

Education and Experience

1. Education: Bachelor degree in related field is required.
2. Security Certification Required: CEH, CISSP, GCIH, GSEC, or similar level security certification
3. 2-3 years leadership/ supervisory experience preferred