Senior Cyber Security Engineer - Phaxis LLC
Stamford, CT 06902
About the Job
Must Have Qualifications:
- Must have experience with Secure DNS, Fortinet, Email Gateways, pinpoint detection, Management Detection and Response. Experience with security audits. Experience managing Firewalls. SIEMs, MDMs and MFA solutions. This is a Senior hire, reporting directly to the CISO. Should have at least 7 years experience in cyber. MUST be fast paced, and able to work on numerous projects simultaneously. Has to have a solid work ethic/drive and good communication.
Plusses:
- healthcare
- CISSP certification
Day-to-Day Responsibilities:
The Senior Cyber Security Engineer is responsible for ensuring security assessments of the information technology environment are being performed and with assisting in the developing and implementing security plans to mitigate those risks. The Senior Cyber Security Engineer will assist with forensics investigations, implementation of new security solutions, participation in the creation and or maintenance of policies, standards, and procedures. In addition, will participate in ongoing vulnerability audits and cybersecurity assessments of internal systems and third-party vendors and assist with incident tickets and request received through company's Service Desk.
The Senior Cyber Security Engineer is responsible for contributing to the creation of the Health System's Cybersecurity strategy in compliance with HIPAA and State regulations, for ensuring security assessments of the information technology environment are being performed and with assisting in the developing and implementing security plans to mitigate those risks. They will assist Risk Management, Human Resources, Information Systems, the Privacy Officer and Chief Security Officer with addressing access incident requests and with assisting with Service Desk tickets.
This position will assist with the company's cybersecurity defenses such as detection, investigation, and response. This individual will participant with performing assessments of current processes/procedure offering improvement recommendations. Is expected to be fully aware of the enterprise's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.
Responsibilities:
Strategy & Planning
Ability to:
- Analyze and resolve issues associated with system access.
- Interact professionally with client community and be committed, helpful, responsive and effective in supporting healthcare applications and activities.
- Ensure the integrity of all the organization's information and maintain confidentiality of all hospital, employee, and patient information.
- Conduct and manage special projects as assigned. This includes work breakdowns, task definition, team leadership, vendor coordination and regular status reporting.
- Provide administrative reports as required, both periodic updates on activities and project status, as well as special reports in response to user or management inquiry.
- Perform initial installations of client workstation software solutions as appropriate.
- Further the Mission and Philosophy of the company's by treating all daily contacts with respect, courtesy and patience.
Location: Stamford, CT will be in office 4 days out of a month - 2x a week for only 2 weeks
Reference #: (Insert JobDiva Req #)
- Must have experience with Secure DNS, Fortinet, Email Gateways, pinpoint detection, Management Detection and Response. Experience with security audits. Experience managing Firewalls. SIEMs, MDMs and MFA solutions. This is a Senior hire, reporting directly to the CISO. Should have at least 7 years experience in cyber. MUST be fast paced, and able to work on numerous projects simultaneously. Has to have a solid work ethic/drive and good communication.
Plusses:
- healthcare
- CISSP certification
Day-to-Day Responsibilities:
The Senior Cyber Security Engineer is responsible for ensuring security assessments of the information technology environment are being performed and with assisting in the developing and implementing security plans to mitigate those risks. The Senior Cyber Security Engineer will assist with forensics investigations, implementation of new security solutions, participation in the creation and or maintenance of policies, standards, and procedures. In addition, will participate in ongoing vulnerability audits and cybersecurity assessments of internal systems and third-party vendors and assist with incident tickets and request received through company's Service Desk.
The Senior Cyber Security Engineer is responsible for contributing to the creation of the Health System's Cybersecurity strategy in compliance with HIPAA and State regulations, for ensuring security assessments of the information technology environment are being performed and with assisting in the developing and implementing security plans to mitigate those risks. They will assist Risk Management, Human Resources, Information Systems, the Privacy Officer and Chief Security Officer with addressing access incident requests and with assisting with Service Desk tickets.
This position will assist with the company's cybersecurity defenses such as detection, investigation, and response. This individual will participant with performing assessments of current processes/procedure offering improvement recommendations. Is expected to be fully aware of the enterprise's security goals as established by its stated policies, procedures, and guidelines and to actively work towards upholding those goals.
Responsibilities:
Strategy & Planning
- Participate in the planning and design of enterprise security architecture, under the direction of the Chief Security Officer (CSO), where appropriate.
- Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines, and procedures) under the direction of the CSO and Team Lead, CyberSecurity, where appropriate.
- Participate in the planning and design of an enterprise business continuity plan and disaster recovery plan.
- Maintain up-to-date detailed knowledge of the IT security industry including awareness of new or revised security solutions, improved security processes, and the development of new attacks and threat vectors.
- Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
- Perform the deployment, integration, and initial configuration of all new security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures generically and the enterprise's security documents specifically.
- Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices).
- Maintain operational configurations of all in-place security solutions as per the established baselines.
- Monitor all in-place security solutions for efficient and appropriate operations.
- Review logs and reports of all in-place devices, whether they be under direct control (i.e. security tools) or not (e.g. workstations, servers, network devices). Interpret the implications of that activity and devise plans for appropriate resolution.
- Participate in investigations into problematic activity.
- Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
- Provide on-call support for end users for all in-place security solutions.
- Works effectively as part of a team in resolving security related issues escalated through the Help Desk in a timely manner. Investigates, tests, solves problems with user's application access rights. Provides high level of customer service and appropriate coverage off-hours for critical problems. Actively participates in the process of identifying service issues with the outsourced Help Desk and recommending solutions.
- Bachelor's degree, or equivalent technical training,
- Minimum of 7 years of information security experience.
- Strong, demonstrable experience with Networking, Microsoft Server, Active Directory Services, and Azure AD
- CISSP certification is strongly preferred.
- Minimum 5 years of experience with intrusion detection and prevention technologies
- 3 Years of experience managing Firewalls. SIEMs, MDMs and MFA solutions
- 2 years performing Information security audits
- Experience with conducting penetration testing
- Expertise with network operating systems and software applications necessary to support security administration.
- Knowledge of Microsoft Windows 10 desktop, and Server 2016 operating system troubleshooting and problem diagnosis.
- Effective documentation skills are essential.
Ability to:
- Analyze and resolve issues associated with system access.
- Interact professionally with client community and be committed, helpful, responsive and effective in supporting healthcare applications and activities.
- Ensure the integrity of all the organization's information and maintain confidentiality of all hospital, employee, and patient information.
- Conduct and manage special projects as assigned. This includes work breakdowns, task definition, team leadership, vendor coordination and regular status reporting.
- Provide administrative reports as required, both periodic updates on activities and project status, as well as special reports in response to user or management inquiry.
- Perform initial installations of client workstation software solutions as appropriate.
- Further the Mission and Philosophy of the company's by treating all daily contacts with respect, courtesy and patience.
Location: Stamford, CT will be in office 4 days out of a month - 2x a week for only 2 weeks
Reference #: (Insert JobDiva Req #)
Source : Phaxis LLC