Information Security Engineer II

Arkansas Children's is a tobacco-free workplace that emphasizes equal opportunity employment. They are seeking an Information Security Engineer II to analyze and resolve security issues, evaluate risks, and provide security monitoring and vulnerability assessments.

Responsibilities:

• Monitors and advises on information security issues related to the systems and workflow
• Monitors security logs and related security events through a SIEM tool
• Performs vulnerability scans and penetration tests; assists in developing and maintaining scripts, routines and software to perform vulnerability threat assessments
• Participates as a member of the security incident response team; evaluates security incidents, assist in developing solutions. Assists in a computer crime or incident scene
• Monitors security controls effectiveness (e.g. user add/remove, systems patching, firewall changes) and the company’s security subsystems
• Participates IT security projects
• Reviews vulnerabilities and assist in making recommendations to IT management
• Assists in evaluating security aspects of systems changes (e.g. wireless, mobile, cloud solutions,)
• Maintains user security awareness training
• Performs other duties as assigned

Requirements:

• Analyzes and resolves security issues, concerns, questions, incidents and events
• Evaluates and identifies risks and threats; addresses unexpected problems
• Provides security monitoring, vulnerability assessment, and analysis into potential security related events and incidents
• Ensures appropriate access to systems for authorized associates while protecting against unauthorized access
• Operates IT security systems
• Evaluates new information security threats and their potential threat to the company
• At least two (2) years of experience with Palo Alto firewalls
• At least two (2) years of experience with Microsoft Purview (data protection, compliance, and governance)
• At least two (2) years of experience with Microsoft 365 security (Defender for Office 365) and cloud security (Defender for Cloud)
• High school diploma or GED or equivalent
• High School Diploma/GED and 2 years of relevant experience, or 4 years of experience in lieu of a diploma/GED
• Bachelor's degree in a related field of study