Cyber Security Engineer

GENERAL SUMMARY:

Responsible for identifying threats and vulnerabilities in systems, software and processes and then developing and implementing cybersecurity solutions to defend against hackers, cyber-attacks and other persistent threats. Engages in testing and monitoring of those solutions, continually making sure that all of the implemented defenses are up to date and working correctly and effectively. Works closely with multiple stakeholders to implement and manage the various solutions required to protect critical assets such as various information technology and other systems, as well as data and users of the technology. Monitors and reports cybersecurity activity while protecting the organization against cybersecurity threats.

PRINCIPAL JOB FUNCTIONS:

1. *Commits to the mission, vision, beliefs and consistently demonstrates our core values.

1. Develops and maintains cybersecurity plans, policies and response playbooks using established security frameworks.

1. Conducts recurrent vulnerability assessments and ensures periodic penetration tests are completed to identify risks.

1. *Identifies, implements and manages core projective measures necessary to mitigate risks and identified threats.

1. *Responds, analyzes, investigates and documents system and/or network security breaches as well as root causes of issues.

1. *Monitors user and device security including anti-virus protection and security patches.

1. *Monitors networks and systems for security events.

1. Audits system backups and air gap backup solutions for proper utilization.

1. Works with department staff to create processes and standards to deploy new technologies.

1. Effectively uses project management tools and methodologies.

1. *Evaluates and documents new systems and devices for use within Bryan Health to ensure they meet security requirements.

1. Supports incident response activities, including steps to contain and minimize the impact and conduct technical analysis to determine response and recovery.

1. *Ability to assist in detection, prevention and analysis of security threats.

1. Enters restricted access areas, without supervision, to perform assigned work.

1. Maintains professional growth and development through seminars, workshops, and professional affiliations to keep abreast of latest trends in field of expertise.

1. Participates in meetings, committees and department projects as assigned.

1. Performs other related projects and duties as assigned.

(Essential Job functions are marked with an asterisk “*”).

REQUIRED KNOWLEDGE, SKILLS AND ABILITIES:

1. Extensive knowledge of operating systems, network and cloud security.

1. Experience in implementing technical security controls and maintaining security systems.

1. Expert understanding and use of vulnerability and security configuration tools.

1. Hands-on experience in maintaining secure networks, systems and application architectures.

1. Maintain and improve secure system configuration, supporting multiple platforms and applications.

1. Critical thinking skills, attention to detail and ability to troubleshoot security and network issues to solve complex problems.

1. Proven experience maintaining anti-virus software, intrusion detection, firewalls and content filtering.

1. Knowledge of risk assessment and methods for risk mitigation.

1. Good oral and written communication skills, attention to detail.

1. Ability to identify and evaluate alternative and innovative solutions to problems.

1. Ability to create appropriate security and systems documentation.

1. Ability to establish and manage priorities.

1. Ability to grasp complex technical and business systems, processes and principles across IT functions and relationships in support of organizational goals.

1. Ability to maintain regular and punctual attendance.

EDUCATION AND EXPERIENCE:

Bachelor’s degree in Computer Science, Information Systems, or equivalent field of study required. Master’s degree preferred. Minimum of four (4) years’ experience with Windows and/or other operating systems, Active Directory, OSI model and TCP/IP networking protocols and concepts. VDI, VMWare Server or Citrix XenApp experience a plus. Three (3) years’ experience in various cyber security related systems (vulnerability management, firewalls, virus management, etc.) required.

OTHER CREDENTIALS / CERTIFICATIONS:

CISSP, CISM or similar industry certification preferred.

PHYSICAL REQUIREMENTS:

(Physical Requirements are based on federal criteria and assigned by Human Resources upon review of the Principal Job Functions.)

(DOT) – Characterized as sedentary work requiring exertion up to 10 pounds of force occasionally and/or a negligible amount of force frequently to lift, carry, push, pull or otherwise move objects, including the human body.

Sedentary work involves sitting most of the time, but may involve walking or standing for brief periods of time.