IT Security Engineer

Stanford Health Care is hiring an IT Security Engineer to identify, investigate, and report vulnerabilities across its environment. The role analyzes security data, supports incident response and resolution, and coordinates with infrastructure and applications teams.

Responsibilities:

• Conduct research, analysis, and correlation across a wide variety of source data to identify and prevent compromise of SHC networks, host systems, and data, including:
• Analyze network traffic and host data to identify anomalous activity and potential threats to SHC resources
• Establish alerting thresholds/triggers, analyze alerts from various sources within the enterprise, and determine possible causes and effects on SHC systems and data
• Validate intrusion detection system (IDS) alerts against network traffic and host data sources using to root out false positives
• Perform regular and ad-hoc vulnerability and malware scans to identify unauthorized access to SHC data systems and malicious code activity such as trojans, root kits, backdoors, bots, or malware
• Provide engineering support for security incidents and threats in the SHC environment, including:
• Perform initial incident triage, determining scope, urgency, and potential impact of security incidents
• Respond to and resolve identified security incidents, maintaining contact with end users and the SHC service desk through resolution
• Perform forensic analysis on known security vulnerabilities and recommend risk mitigation procedures
• Perform trend analysis and reporting on security incidents, identify technical and procedural findings, and recommend remediation strategies or technical solutions
• Participate in IT security audits as required

Requirements:

• Bachelor's degree in Engineering, Computers Science, or related field from an accredited college or university
• Three (3) years of progressively responsible and directly related work experience
• Strong knowledge and experience with tools, platforms, and protocols such as:
• TCP/IP, Dynamic Host Configuration Protocol (DHCP), Domain Name System (DNS), and directory services
• Network security defense technologies such as IDS, IPS, Endpoint protection, DLP, NAC, Proxy, and WAF
• Unix, Linux, Apple, and Windows operating systems
• SCCM/SCOM
• Mobile platforms
• Strong knowledge of network security architecture concepts including topology, protocols, components, and principles (e.g., application of Defense-in-Depth)
• Ability to identify systemic security issues based on analysis of vulnerability and configuration data
• CISSP - Cert Information Systems Security Prof
• CISM, OR GIAC