Cyber Security Engineer II

GBMC HealthCare is seeking a Cyber Security Engineer II to support its enterprise IT security and threat mitigation framework. The role engineers, implements, monitors, and manages security controls, responds to incidents, remediates vulnerabilities, supports digital forensics and EMR security, and leads cybersecurity projects and initiatives.

Responsibilities:

• The engineering, implementation and monitoring of security measures for the protection of IT assets, networks and electronic protected data
• The design, implementation and management of enterprise security architecture
• The documentation of all relevant standard operating procedures and policies
• The proper operation of all proactive threat mitigation measures
• The remediation of identified vulnerabilities or security events
• Security incident response and root cause analysis with forensic documentation
• Security education and training
• Maintains current knowledge of relevant technology and industry best practice
• Participates in special projects and other duties as assigned
• The building and integration of solutions and leading of department projects and initiatives as determined by Cyber leadership
• Building and applying infrastructure, policies, dashboards and alerting
• Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities
• Responsible for access control, passwords, and account creation and administration and auditing
• Collects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigations
• Vulnerability detection analysis and remediation through SIEM analysis
• Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices
• Evaluates vulnerabilities and assist with planning and implement remediation procedures
• Assist in the creation, auditing and maintenance of policies and procedures in relation to IT and cybersecurity
• Assist in the detection, analysis and remediation of security vulnerabilities in system
• Ability to prepare and deliver education and awareness briefings to ensure that systems, network, and data users are aware of and adhere to systems security policies and procedures
• Remain current in knowledge of cyber threats and global trends - Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterprise
• Develop content for cyber defense tools
• Performs Computer Security Incident Response according to industry best practice and assist with RCA and forensic documentation
• Assist with design, development and implementation of the Cybersecurity Framework policies and procedures
• Ensures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devices
• Ensure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable level
• Monitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediation
• EMR Security Support
• Performs periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine compliance
• Assist with SSL certificate management
• Assist with implementing periodic BCA and HA validation
• Lead and/or participate in special projects as required

Requirements:

• Bachelor's degree or current high-level IT security / cybersecurity certification
• Associate's degree or mid-level IT security / cybersecurity certification plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the position
• Degree must be in Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Healthcare IT, Information Assurance, Information Security, and Information Systems)
• Relevant experience must be in computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance, and/or systems engineering
• 2-5 years as a system security engineer or building and maintaining comprehensive IT security systems required
• Ability to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Demonstrated ability to work independently or under only general direction
• Demonstrate effective written and oral communication skills
• Experience with EPIC EMR
• Familiar with Vulnerability Management Process
• Familiar with Security Monitoring & Event Management
• Familiar with Infrastructure patching management process
• Experience using Tenable scanning tool, KnowBe4, Citrix NetScaler
• Familiar with BIOMED device and patch management
• Familiar with Forcepoint web filtering
• Familiar with Mobile Device Management
• Proficiency with Active Directory and Microsoft Office Admin 36
• Requires familiarity with domain structures, user authentication, and digital signatures
• Requires understanding of FISMA policies and procedures, including FIPS 199, FIPS 200, NIST HIPAA, -and other applicable policies
• Knowledge of network tools (e.g., ping, traceroute, nslookup)
• Knowledge of encryption methodologies
• Industry cyber tool certifications considered if relevant to GBMC
• Preference for certifications for EMR security, network security, cybersecurity or digital forensics from EC-Council, CompTIA, SANS