Sr. Cyber Security Engineer

Children's Healthcare of Atlanta is one of the nation’s leading children’s hospitals. The Cyber Security Engineer will serve as an expert on enterprise information security design and implementation, responsible for determining security requirements, planning, implementing, and testing security systems, and mentoring team members.

Responsibilities:

• Provide design and product recommendations for security technologies needed across the enterprise. Ensuring security technologies deliver on stated use cases and business requirements
• Partner closely with the Enterprise Architects, Project Managers, Infrastructure Leaders, and Application Development teams to ensure a consistent approach to securing information and the assets which process and store that information
• Direct strategies around developing software security for enterprise, web, and mobile applications; and mobile hardware and software technologies. Assist in application development/software development/deployment methodologies, for enterprise, web, and mobile based environments
• Work with developers and subject matter experts to establish the technical vision for application architectures and technology (including web applications, mobile technology, and identity and access management)
• Write detailed security requirements for deployment of applications and network infrastructure components and participate on focus groups to help define security requirements for new and emerging technologies
• Define and implement information security architecture policies, standards, and baselines. Make recommendations regarding security plans, policies, standards, and procedures
• Direct key technology initiatives with a focus on planning, development and implementation of security architecture and monitoring directives
• Define new users to various applications based on authorized requests. Assist the Solution Center with security-related problems

Requirements:

• 7+ years total experience and solid understanding of any combination of the following support and monitoring of security endpoints/servers such as patch deployment/risk assessment/vulnerability scanners/security incident and event monitoring solutions/antivirus products, Network Security Protocols and Methodologies, Information Security & IT controls, security penetration and vulnerability assessments. or systems/network administration
• Familiarity with HIPAA, Joint Commission, NIST and ISO frameworks, and other information security governing bodies
• Experience with NIST and ISO frameworks
• Bachelor's Degree in Computer Sciences, Information Technology, or related discipline or equivalent experience required
• Certified or willingness to obtain certification within one year of hire in the following area(s): Certified Information Systems Security Professional (CISSP), GIAC Certified Intrusion Analyst (GCIA), GIAC Certified Window Security Administrator (GCWN), GIAC Certified Enterprise Defender (GCED), GIAC Security Essentials Certified (GSEC)
• Strong knowledge of Physical and Logical security systems required
• Demonstrated knowledge of generally known information technology platforms, standards, and software development language(s)
• Demonstrate well-developed verbal and written communication and analytical skills
• Strong interpersonal skills to interact positively and productively with teams across organizational lines, including administrative, executive staff and patient care systems users
• Must be able to function in a dynamic environment subject to impromptu changes in schedules and priorities
• 5+ years of experience in database management system security preferred
• 2+ years of experience in healthcare setting preferred
• Leadership Experience in IT Support Organization preferred