Senior Information Security Engineer

Directly accountable for safeguarding the organization’s information assets. The role involves designing, implementing, and enforcing security protocols and procedures that mitigate risks and ensure compliance.  With heavy focus in information security operations, including vulnerability management, incident/event management, compliance management, policy/procedure development and information security awareness.

This responsibility will be carried out through the development of information security requirements, planning, design, implementation, and periodic audit/validation of effectiveness of all security controls.

Accountabilities:

• Architect, design, and implement security controls for our infrastructure and critical systems.
• Determine information security requirements by evaluating and researching information security standards; conducting system security and vulnerability analyses and risk assessments; studying architecture/platform; and identifying integration issues.
• Verify information security systems effectiveness by developing and implementing testing and validation processes to periodically audit systems.
• Collaborate with managed security service provider (MSSP) to ensure their services are effectively delivered to our organization and validate that alerts are properly acted upon to mitigate identified threats.
• Support security incident response activities utilizing security tools (SIEM/SOAR)
• Lead and collaborate in the development of a Business Continuity and Disaster Recovery plan.
• Prepare system security reports by collecting, analyzing, and summarizing data and trends.
• Track and understand emerging security practices and threats.  Leverage this knowledge to improve security configurations across the enterprise and hunt for potential or active threats.
• This role will be responsible for monitoring Healthcare industry and regulatory trends to ensure prompt and complete action plans are developed and implemented to address such requirements.
• Serve as the primary liaison for audit activities related to the areas of information security.
• This will also include maintaining ongoing cybersecurity risk profile using the recommended industry tools, and being certain that activities which keep us aligned with our target levels are implemented.
• Demonstrable expertise in implementing, managing, and fine-tuning security controls using a variety of security tools and frameworks. Specific experience with Palo Alto firewalls and Palo Alto suite of security tools.
• In-depth experience with Identity and Access Management (IAM), specifically in designing and implementing IAM solutions for provisioning, de-provisioning, and role-based access controls within the organization. Familiarity with industry standard IAM solutions and best practices is a must.
• Familiarity with monitoring and managing security incidents, including the use of Security Information and Event Management (SIEM) tools.
• Proven track record in working with cross-functional teams to address security and compliance challenges, specifically in a regulated financial environment.
• Experience in developing and implementing security policies and procedures that align with industry regulations such as PCI-DSS, NCUA, or related financial sector regulations.
• Previous involvement in handling external and internal audits related to information security, along with remediation of identified issues.
• A high level of problem-solving skills and the ability to communicate in a clear, concise manner.
• Must be able to communicate effectively in both oral and written form and explain technical concepts in non-technical terms to staff and prepare clear and concise written communications.
• Must be able to manage multiple projects/tasks concurrently; and prioritize requests and complete assignments within an estimated timeframe; and organize, schedule, and coordinate a variety of activities and projects.
• Must have the ability to learn new software and hardware packages and adapt to changes in technology.

Qualifications:

• Bachelor’s Degree in computer science or Equivalent work experience
• At least 10 years of experience in information security preferred
• Excellent written communication skills.
• Strong organizational and planning skills.
• Demonstrates a high degree of personal integrity and practices ethical standards. Must remain objective and independent when completing assignments, and consistently demo