Security Engineer

Overview

Security Engineer III role with Talent Bridge. This is a primarily remote security engineering position with periodic in-person meetings (once a month) at Skokie, Warrenville or Elmhurst locations. The role may include a 24/7 on-call rotation and requires strong leadership, project management, and communication skills.

Years of Experience: 8 years

Degree Required?: Yes

Responsibilities

• As the Security Engineer III, you will be responsible for enhancing Cybersecurity and safeguarding the organization's data and resources primarily through remote work.
• This role involves documenting, and refining security procedures, conducting system reviews to ensure compliance with security requirements, execute risk management and governance tasks, or leading security incident response activities.
• The Security Engineer III will also design and implement security policies for various devices and systems, oversee security for internal and external systems, and mentor junior staff. Candidates should be proficient in using advanced security tools.
• Responsibilities extend to participating in compliance audits, managing cybersecurity projects, and ensuring alignment with HIPAA, other applicable laws and regulations and/or standards.
• This mostly remote role may include a 24/7 on-call rotation and requires strong leadership, project management, and communication skills.
• Document and refine procedures and techniques used by the Information Security and other teams.
• Measure and report organization's security capabilities using automated and manual tools.
• Research and test security tools pertaining to tactical or strategic plans.
• Perform activities as outlined in the security incident management procedure.
• Review logs from security tools, including IPS/IDS, secure email gateway, data loss prevention system, content proxy, vulnerability assessment tools, antivirus, etc.
• May visit specific sites to identify cyber security vulnerabilities and report on findings.
• Socializes strategies, standards, policies, procedures, communications, and awareness efforts with business partners.
• Participates in reviews of new or existing systems to ensure security requirements are satisfied, prior to implementation, including Risk Assessment.
• Assists with system-wide compliance of the HIPAA Security and Privacy rules and other appropriate standards, audit requirements, works with internal audit staff to conduct regular tests and audits. Assists with external security assessments and penetration tests, and other activities.
• Designs policies as required for security devices, including IPS/IDS, antivirus, and vulnerability management tools.
• May oversee internal or external systems security (i.e., cloud services).
• Lead security incident response activities.
• Mentor and train junior staff on the effective use and management of security tools.
• Design comprehensive security measures, integrating new technologies and methodologies.
• Manage multiple cybersecurity projects.

Qualifications

• Education : Bachelor's degree required (Master's degree preferred)
• Certifications : at least one industry standard certification within security.
• Experience :
  • Minimum eight (8) years combined IT/ Cybersecurity experience.
  • Previous experience with ability to lead, support, and document two applications.
  • Previous experience leading security initiatives.

Details

• Seniorities : Mid-Senior level
• Employment type : Full-time
• Job function : Information Technology
• Industries : Hospitals and Health Care