Cybersecurity Engineer Senior

Cone Health; Greensboro (NC); On-site; USD 110,000 - 140,000; Full time

Job summary

Cone Health in Greensboro, NC seeks a Cybersecurity Engineer to design and implement information assurance, lead penetration testing, and coordinate incident response across complex systems.

You will conduct audits, maintain security controls, and guide incident response with the CIRT. Requires a Bachelor's or equivalent experience, 7 years IT/IT security, and CISSP with CEH planned within 12 months.

Qualifications

• Bachelor's degree or equivalent experience; 10 years in IT with 5 years in IT security if using equivalent experience.
• 7 years of experience in IT with relevant security focus required.
• CISSP certification required; CEH must be obtained within 12 months of hire.

Responsibilities

• Safeguards information systems by identifying potential and actual security problems.
• Protects system by defining access privileges, control structures, and resources.
• Recognizes problems by identifying abnormalities, reporting violations and mitigate vulnerabilities.
• Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
• Determines security violations and inefficiencies by conducting periodic audits.
• Upgrade systems by implementing and maintaining security controls.
• Lead security briefings and incident response strategies.
• Provide strategic guidance and subject matter expertise to the Cyber Incident Response Team (CIRT).
• Conduct in-depth penetration tests on computer systems.
• Create penetration test reports and advise on security upgrades.

Skills

Penetration testing

Incident response

Security architecture

Risk assessment

Education

Bachelor's degree or equivalent experience

Tools

SIEM tools

Vulnerability scanners

Job description

The Cybersecurity Engineer ensures information assurance and compliance design, integration, implementation, modification, and coordination of the installation, testing, operation, and disposition of hardware and software systems. Functions may include conducting analyses, developing functional and technical requirements and specifications, documentation, monitoring the availability, serviceability, and recoverability of installed technology security systems, implementing cyber security procedures and tools, maintaining systems configuration, managing the installation and integration of system patches updates, and enhancements, and ensuring the rigorous application of information security/information assurance policies, principles, and practices. As a certified ethical hacker, you will be required to research the type of system being used, find ways to penetrate the system and identify any weaknesses. Create penetration test reports and advise on security upgrades.

Essential Job Function

• Safeguards information systems by identifying potential and actual security problems.
• Protects system by defining access privileges, control structures, and resources.
• Recognizes problems by identifying abnormalities, reporting violations and mitigate vulnerabilities.
• Implements security improvements by assessing current situation; evaluating trends; anticipating requirements.
• Determines security violations and inefficiencies by conducting periodic audits.
• Upgrade systems by implementing and maintaining security controls.
• Conduct routine system checks and security assessments; preparing performance reports; communicating system status.
• Maintains quality service by following organization standards.
• Assist in the development, maintenance and implementation of security procedures and protocols.
• Lead security briefings and actively engages in incident response strategies.
• Provide strategic guidance and subject matter expertise to the Cyber Incident Response Team (CIRT).
• Conduct in-depth, internal/external penetration tests on computer systems.
• Research the type of system being used, find ways to penetrate the system and identify any weaknesses.
• Create penetration test reports and advise on security upgrades.
• Performs other duties as assigned.

Education

• Required: Bachelor's Degree and/or equivalent experience (10 years' experience in IT with 5 years in IT Security is needed for equivalent experience).

Experience

• Required: 7 years.

Licensure/Certification/Listing

• Required: Certified Information Systems Security Professional (CISSP) certification. Certified Ethical Hacker (CEH) must be obtained within 12 months of hire.