Information Security Engineer

Information Security EngineerInformation Security Engineers are responsible for the day-to-day access to and security of system resources. This includes identifying, implementing, and maintaining appropriate controls to provide confidentiality, integrity, and availability (C-I-A) to the system resources facilitating the routine functions of the business. This role coordinates closely with other groups on a wide range of security projects. As a member of our Cloud Services team, your job would involve:Ensuring corporate data privacy and securityEvaluating output from various security monitoring toolsCoordinating with monitoring group to prioritize actionPlanning and implementing remediation and/or mitigating controlsCarrying out security based risk assessments and advising on any potential risk acceptanceImplementing controls and working with other teams to ensure appropriate access to corporate assetsMaintaining knowledge of security/regulatory concepts such as least privilegeProviding security feedback and expertiseImplementing any controls needed to end the current incident and protect against future occurrencesDesigning, implementing, and maintaining secure system configurationsAssisting in the security evaluation of system design and implementationCommunicating and coordinating with other security and IT groups.Requirements:Bachelor's or associate degree preferred, and/or 2-3 years applicable work or military experienceSecurity specific certifications preferred, but not required:Certified Information Systems Security Professional, (ISC)² - CISSPCertified Information Systems Auditor, ISACA - CISAGlobal Information Assurance Certifications, GIAC - GISF, GCED, GNFA, etc.Certified Cloud Security Professional, (ISC)² - CCSPCertificate of Cloud Security Knowledge, CSA - CCSKCertified Cloud Security Specialist, GSTF - CCSSKnowledge and awareness of applicable information security standards, guidelines, regulations, and industry standard best practices:Information Security Management (ISO 27001/27002/27017)Security Operations Center (SOC I & II)Quality Management (ISO 9001)National Institute of Standards & Technology (NIST)Scripting experience (especially in IT operations)Multiple years of experience or education dealing with information security tools and techniquesAbility to identify and work with application and system experts to help identify and remediate vulnerabilitiesAbility to work with various monitoring resources to understand current security threats and engineer solutionsAdvanced knowledge of information security principles and practices, including any of the following: security risk assessment standards, risk assessment methodologies, and vulnerability assessmentStrong analytical, reasoning, and problem solving skills and technical aptitudeExceptional written and verbal communication skillsAbility to work well with stakeholders and interested parties of varying position and tenureAbility to use discretion when handling confidential informationAbility to learn new tools and technologies quickly.Hiring salary range: $66,000- $105,000 per year. Actual salary will be determined based on an individual's skills, experience, education, and other job-related factors permitted by law.MEDITECH offers competitive employee benefits including but not limited to health, dental, & vision insurance; profit sharing trust and 401(k); tuition reimbursement, generous paid time off, sick days, personal time, and paid holidays.This is a hybrid role which includes a blend of in-office and remote work as designated by the management team.In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification form upon hire. MEDITECH will not sponsor applicants for work visas.