Endpoint Cybersecurity Engineer (Remote Available)

Discover Vanderbilt University Medical Center:  Located in Nashville, Tennessee, and operating at a global crossroads of teaching, discovery, and patient care, VUMC is a community of individuals who come to work each day with the simple aim of changing the world. It is a place where your expertise will be valued, your knowledge expanded, and your abilities challenged. Vanderbilt Health is committed to an environment where everyone has the chance to thrive and where your uniqueness is sought and celebrated. It is a place where employees know they are part of something that is bigger than themselves, take exceptional pride in their work and never settle for what was good enough yesterday. Vanderbilt’s mission is to advance health and wellness through preeminent programs in patient care, education, and research.

Organization:

VEC TDR

Job Summary:

The Endpoint Cybersecurity Engineer will be a technical endpoint security subject matter expert for VUMC Enterprise Cybersecurity (VEC). They operate as a representative for endpoint cybersecurity solutions and will be responsible for endpoint security posture within the VUMC organization. The non-patient care FTE will have scoped priorities focused on the knowledge of the latest endpoint security trends, products/solutions, industry best practices, regulatory compliance, and endpoint security and management architectural guidelines.

.

KEY RESPONSIBILITIES:

• Identify, deploy, maintain, and administrate endpoint security technologies for endpoints (incl. but not limited to desktops, laptops, servers, mobile, Internet-of-Things / IoT, printers, medical devices, etc.).

• Implement endpoint security architecture design and recommendations.

• Contribute as a subject matter expert in developing an endpoint defense strategy for the VUMC organization.

• Provides advanced endpoint and network knowledge and troubleshooting capabilities, both in on-premises and cloud-based environments.

• Understanding of endpoint network protections.

• Independently delivers on objectives with an understanding of how they impact the results of own area/team and other related teams.

• Utilizes multiple sources of data to analyze and resolve complex problems.

• Knowledgeable in endpoint protection, detection, and response software tools/solutions.

• Understanding of data loss prevention functions and technologies.

• Understanding of containerization and virtualization.

• Implement, troubleshoot, and maintain endpoint security agent deployments.

• Establish solutions to conduct endpoint security assessments and audits.

• Strong verbal and written skills.

• The responsibilities listed are a general overview of the position and additional duties may be assigned.

TECHNICAL CAPABILITIES:

• Highly capable with Microsoft endpoint security products, solutions, and functions (incl. but not limited to data loss prevention, endpoint detection and response, host firewall and encryption, anti-virus, application control, Azure endpoint security features)

• Familiarity with Microsoft 365 and Azure security products and services.

• Familiarity with Palo Alto Networks endpoint products.

• Familiarity with “Secure Access Service Edge” (SASE) concepts and technologies as they apply to endpoint devices.

• Capable of deploying endpoint firewalls and threat prevention agents within both physical and virtual endpoint environments (incl. “cloud”).

• Capable of developing endpoint security posture (policy and technology) for non-standard endpoint devices (Internet-of-Things / IoT, printers, medical devices, etc.).

• Comprehend and utilize logging data for troubleshooting and operational status monitoring.

• Security Troubleshooting (Intermediate): Demonstrates the ability to identify, locate, isolate, and resolve complex problems relating to information security and related areas. Able to use the advanced capabilities of the primary diagnostic and visibility tools available.

• Familiar with the capabilities of vendors to find and fix problems.

• Confident in working with vendors and other IT-supporting admins in a collaborative environment.

• Capable of finding solutions and answers beyond the area of specialty. Displays the competence to implement solutions that may go beyond the scope of the immediate problem. Demonstrates persistence and thoroughness.

• Security Monitoring (Intermediate): Demonstrates mastery of Security Monitoring in practical applications of a complex nature. Conducts research into security intrusion trends and man