Security Engineer II - IS Security - Full Time 8 Hour Days (Non-Exempt) (Non-Union)

Provide Keck Medicine of USC operational, administrative and project support for the Information Security department whose purpose is to ensure the integrity of Information Systems Assets and to protect systems from unauthorized access or destruction. This role includes, but is not limited to: network security, systems security, IS policy, security solutions, incident response, monitoring, reporting, and general Information Technology concepts. Provide escalation support to senior engineers for most complex issues. The Security Engineer II will perform technical analysis, installation, maintenance & modification of systems and software. Monitor, analyze and report on performance of systems. Participate in security solution implementations, incident response & remediation for identified incidents, particiapte in the development of policies, standards, procedures for the general operation of the InfoSec Team. Responsibilites for this position include Implementing and monitoring security measures for the protection of computer systems, networks and organizational data; designing cyber security processes including but not limited to Incident Response, Eradication, etc. Carry out security measures to protect an organization's computer networks and systems: Detect, Respond, Mitigate, Report, Recover, Remediate, Lesson Learned. Identify and define system security requirements. Responsibilities will continually expand as the number and type of cyber attacks increase and change.

Essential Duties

• Provide after-hours and weekend support where necessary for a 24x7 incident response model.
• Follow established IS procedures to ensure the safety of the IT systems and assets.
• Investigate and remediate incidents with standard Incident Response protocols. Inclusive of escalations and communications.
• Forecast and recommend short- and long-term solutions and strategies; lead implementation of those strategies.
• Implement and monitor security measures for the protection of computer systems, networks and information. Prepare and document standard operating procedures and protocols.
• Take appropriate actions to ensure minimal disruption to business customers.
• Develop technical solutions and new security tools to help mitigate security vulnerabilities and automate repeatable tasks.
• Recommend security enhancements to management or senior IT staff.
• Collaborate with other IS teams on incidents, remediation, security systems & solutions, communications, etc.
• Prepare reports that document security breaches and the extent of the damage caused by the breaches.
• Identify and define system security requirements.
• Configure and troubleshoot security infrastructure devices.
• Performs other duties as assigned.

Qualifications

• Req Associate's degree Computer Science or a related field
• OR the equivalent combination of experience and education that would demonstrate the capability to successfully perform the essential functions of this position
• Req 5 years Experience in general Information Security.
• Pref Healthcare experience.
• Pref PCI, HIPAA, NIST experience.
• Pref Security control concepts: physical, logical, administrative.
• Req Proven work experience as a system security engineer or information security engineer
• Req Experience in working with and maintaining security systems
• Req Detailed technical knowledge of operating system security
• Req Hands on experience in security systems including: intrusion detection systems, anti-virus software, authentication systems, log management, content filtering, etc.
• Req Experience with network security and networking technologies
• Req Experience with security systems and tools
• Req Understanding of the latest security principles, techniques, and protocols
• Req Performs/follows all procedures to ensure the safety of Information Systems assets and to protect systems from intentional or inadvertent access or destruction.
• Req Ability to develop and implement IT security standards and procedures.
• Req Knowledge and understanding of IT industry trends and emerging technologies and an ability to relate them to the organization and its objectives.
• Req Knowledge of information security industry and regulatory obligations (PCI DSS, SOX, HIPAA, NIST Framework 800 series, etc.)
• Req Problem solving skills and ability to work under pressure
• Req Good communication (oral and written) and interpersonal skills
• Req Able to solve a range of problems in stressful situations
• Req Able to analyze possible solutions and assess each using standard procedures
• Req Able to effectively explain information and influence others in straightforward situations
• Req Able to make appropriate decisions within guidelines and policies
• Req Able to effectively prioritize own work to meet changing deadlines
• Req Provide after-hours and weekend on-call support for service-related issues
• Req Fire Life Safety Training (LA City) If no card upon hire, one must be obtained within 30 days of hire and maintained by renewal before expiration date. (Required within LA City only)
• Pref One (or more) of the following security certifications: ISC2 certificates, GIAC certificates, CISM/A, CEH, etc.

Keck Hospital of USC, a 343-bed acute care hospital, provides exceptional and innovative care for complex medical and surgical conditions across a wide range of specialties. The hospital’s world-renowned physicians deliver compassionate, customized, patient-centered care and treat the most acutely ill patients with highly innovative techniques and treatment plans. As a leading academic medical center, hundreds of clinical trials are currently taking place at Keck Hospital and its affiliated research institutions, giving patients access to novel and promising therapies that are generally not available elsewhere. Every day at Keck Hospital, physicians, nurses and staff go beyond the science of exceptional medicine to bring patients breakthroughs in the art of caring. Join this world-class team providing highly specialized care, up-to-the-minute research, and innovative clinical trials.

The hourly rate range for this position is $47.84 - $79.11. When extending an offer of employment, the University of Southern California considers factors such as (but not limited to) the scope and responsibilities of the position, the candidate’s work experience, education/training, key skills, internal peer equity, federal, state, and local laws, contractual stipulations, grant funding, as well as external market and organizational considerations.

USC is an equal opportunity employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, protected veteran status, disability, or any other characteristic protected by law or USC policy. USC observes affirmative action obligations consistent with state and federal law. USC will consider for employment all qualified applicants with criminal records in a manner consistent with applicable laws and regulations, including the Los Angeles County Fair Chance Ordinance for employers and the Fair Chance Initiative for Hiring Ordinance, and with due consideration for patient and student safety. Please refer to the Background Screening Policy Appendix D for specific employment screen implications for the position for which you are applying.

We provide reasonable accommodations to applicants and employees with disabilities. Applicants with questions about access or requiring a reasonable accommodation for any part of the application or hiring process should contact USC Human Resources by phone at View phone number on aiapply.co, or by email at View email address on aiapply.co. Inquiries will be treated as confidential to the extent permitted by law.

• Notice of Non-discrimination
• Employment Equity
• Read USC’s Clery Act Annual Security Report
• USC is a smoke-free environment
• Digital Accessibility

If you are a current USC employee, please apply to this USC job posting in Workday by copying and pasting this link into your browser: