Senior Federal Information System Security Engineer

We’re on a journey to advance how health happens with technologies that empower patients, support clinicians, inspire innovation, and save lives. Our mission? To create a human-centric healthcare experience powered by unified global data. 

It’s a big challenge, but big challenges are what we do best. We’re already transforming some of the world’s largest health systems—helping them turn data into lifesaving decisions and better patient care.

We want people just as dedicated as we are to improving health equity and delivering quality care across the globe. If you’re excited about making healthcare more human, you’ve come to the right place.

You will apply knowledge of security principles, policies and regulations to design and engineer system security solutions that meet federal security requirements and reduce the clients operational and security risks by applying risk management frameworks. This role will allow you to conduct security impact analysis and system risk assessments to identify potential security threats and recommend enhancements to improve deficiencies as well as create and execute plans for system security testing, assessment and authorization for deployment. In scope will be to implement system security solutions, perform ongoing performance audits and system maintenance and provide support for performance issues. In scope will be to develop the connection information for systems across cyber boundaries, and validate the encryption when the connection is established.

Responsible for basic planning, design and build of secure connections for applications, environments and architectures; oversees the implementation of security systems, applications, environments and architectures and ensures compliance with information security standards and corporate security policies and procedures.
Assist in development of incident response capabilities, training, and tool validation.
Research industry trends and constantly assess current controls and threat posture of new and existing products and services.
Recommend and implement new security controls across Oracle’s line of business (LOB).
Improve current processes and workflows to minimize manual efforts.

Basic Qualifications:

• At least 10 years of total combined higher education and related work experience including:
  • At least 3 years of information systems security work experience
  • At least 7 years of higher education and/or additional work experience directly related to the duties of the job
    • Bachelor's degree in Information Security, Information Systems, Computer Science, Computer Engineering, Software Engineering, Mathematics
• Receipt of the appropriate government security clearance card applicable for your position
• Due to the client contract you will be assigned, this position requires you to be a U.S. citizen

 

Preferred Qualifications:

• Certified Information Systems Security Professional (CISSP) - (ISC)²
• Certified Ethical Hacker (CEH) - EC-Council
• Certified Information Security Manager (CISM) - ISACA
• Cybersecurity Experience
• Federal government experience
• JIRA or other project tracking experience

 

Expectations:

• Must reside in or be willing to relocate to an already virtually approved location
• Must be willing to travel up to 20% as needed
• Willing to work additional or irregular hours as needed and allowed by local regulations
• Work in accordance with corporate and organizational security policies and procedures, understand personal role in safeguarding corporate and client assets, and take appropriate action to prevent and report any compromises of security within scope of position
• Perform other responsibilities as assigned

Minimum of 5 years related experience in an information security role, supporting security programs and security engineering/architecture in complex enterprise environments. Hands on experience with enterprise security architecture, engineering and implementation required.
Knowledge of compliance program security controls, like ISO 27001, SOC 2, HITRUST, and FedRAMP, as applied to cloud SaaS, PaaS and IaaS operations.
Familiarity with SDLC principles and scripting & programming languages (such as Terraform, Python, Ruby, etc.).
Preferred but not required qualifications include:
Bachelor-level university degree in a relevant field from an accredited university, or equivalent. 
Experience in developing secure, scalable cloud architectures and distributed systems.
Experience with high-level software design and development and the design, use, and deployment of automation and orchestration frameworks.
Demonstrable scri