Cyber Security Engineer III

Profile

Cyber Security Engineer III','Full-time','IT','Days','Days','80','80','Occasional','Occasional','COLORADO-ENGLEWOOD-DENVER MERIDIAN NORTH','WASHINGTON-TACOMA-FRANCISCAN HEALTH SYSTEM','!*!
Key Functions

Lead vulnerability assessments and security reviews through a comprehensive testing process to identifying weaknesses and vulnerabilities within the systems that affect the confidentiality, integrity and availability of electronic protected health information and other sensitive company data.
Provide technical support to system owners to propose mitigation and remediation solutions to identified vulnerability and security issues.
Assist CHI in improving the security posture capability by researching technical threat areas; developing information security assessment methods and techniques; and providing information, solutions and training for preventing, detecting, and responding to threats and vulnerabilities. 
Threat analysis and modeling; involving examination, analysis, documentation, and assessment of internal and external threats, electronic crime activity and information security risks to critical infrastructure systems
Responsibilities

Lead vulnerability assessments of current applications, and systems to evaluate against HIPAA and PCI, Federal and State Information Protection and Privacy regulations, CHI Security policies and standards, and other relevant regulations pertaining to the protection of Enterprise information assets with respect to information security.
Responsibilities include vulnerability management, scanning and remediation, patch management, and threat and vulnerability assessment.
Maintain, execute, and refine processes to monitor, collect, and update information about threats and vulnerabilities for input into the Threat Vector Analysis process
Leads collaborative programs with personnel in all IT departments to ensure that secure development, coding and system deployment practices are consistently implemented throughout the enterprise.
Perform security posture assessments conducted on-site including pre- and post-assessment analysis, preparation of technical reports and briefings to customers, and possibly participating in development of tools, scripts, and other assessment products.
Perform security code reviews.','!*!Skills, Requirements, and Certifications (Includes specific or unique technical skills / knowledge / experience)

Bachelor's degree in IT Security, Information Systems, or Computer Science or equivalent experience. 
Minimum of 8 years of progressive experience in information technology including 6 years in systems and or applications security, including maintenance and use of security products in a distributed enterprise environment.
One or more appropriate security certifications, such as CISSP, CISA, C|EH,
Required demonstrated knowledge of information technology security, trends, leading practices, and regulatory and industry standard compliance issues such as, Health Insurance Portability and Accountability Act (HIPAA), Payment Card Industry Standard (PCI), and FIPS-140.
Demonstrated ability to prepare documentation and presentations for technical and non-technical audiences.
Progressive background and experience in administering and supporting all areas of information technology.
Knowledge of methods for on-going evaluation of the effectiveness and applicability of information security controls (e.g., vulnerability testing, and assessment tools).
Ability to understand information security risks associated with vulnerability and penetration testing
In-depth knowledge of patching programs of major Hardware/Software manufacturers.
In-depth knowledge of secure configuration and hardening of systems.
Ability to analyze vulnerabilities in order to appropriately characterize threats and provide remediation advice.  Familiarity with classes of vulnerabilities, appropriate remediation, and industry-standard classification schemes (CVE, CVSS, CPE).
Extensive experience with common commercial and open sourced vulnerability scanning and security auditing tools.
Knowledge of common attack methodologies; common types of security vulnerabilities;
Proficiency in the use of manual and automated techniques for scanning, vulnerability, and penetration testing of networks, applications, operating systems, databases, and email systems
Including additional skills in more than one of these areas:
Sound knowledge of network protocols, operating systems and management systems with hands-on experience.
Knowledge of TCP/IP networking and standard protocols (FTP, SMTP, HTTP, SNMP, etc.)
System administration and network administration skills and familiarity with Windows, UNIX, LINUX and IOS operating systems.
Experience with secure coding practices, thread modeling, vulnerability assessment
Practical knowledge of the Open Web Application Security Project development and/or testing methodologies.
Assist in development of security-related software development processes including coding standards, technical documentation standards, QA processes, build, and configuration management.
Interactions, hand-offs

Collaborates with other ITS and Security staff in implementing consistent security safeguards and controls throughout the organization
Facilitates and reviews control and compliance initiatives, such as self-assessments, third party reviews and due diligence initiatives.
Works with Security Architecture to establish and document standard security policies and procedures
Involvement with the enterprise project management office in testing new systems and software for vulnerabilities prior to go-live.
Provides guidance to ITS and hospital staff on security policy and standards.','We’re an equal opportunity employer. All applicants will be considered for employment without attention to race, color, religion, sex, sexual orientation, gender identity, national origin, veteran or disability status.','2017-R0132354','Catholic Health Initiatives - National Office','Cyber Security Engineer III

Company info

Sign Up Now - WashingtondcCrossing.com