Information Security & Cyber Defense Engineer

Univera HealthСare; City of Rochester (NY); Hybrid; USD 60,000 - 107,000; Full time

Benefits offered by this job

Remote work possible

Job summary

Univera Healthcare in Rochester, NY seeks an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. This role provides risk management, compliance services, and consulting across business lines, covering Security Operations, Governance, Risk and Compliance, and Identity and Access Management.

The position involves design and operation of security infrastructures, on-call rotation, and support for HIPAA, PCI, and COBIT

Qualifications

• Bachelor's degree or 6 years related experience as alternative.
• Hands-on experience with mainframe, Windows, UNIX.
• Knowledge of encryption, PKI, and security tools.
• Familiarity with corporate security policies and standards.
• Experience with HIPAA, MAR, PCI and COBIT compliance as context.

Responsibilities

• Design, implement, and operate organization-wide security infrastructures.
• Maintains security technologies and supports defense against modern threats.
• Supports Information Security Framework maturity and risk management.
• Responds to requests within defined SLAs for security systems and processes.
• Participates in 24/7/365 on-call rotation and audits.

Skills

Excellent verbal communication

Concise written communication

Organizational skills

Risk management awareness

Security governance concepts

Education

Bachelor's degree in computer science / Information Technology / relevant field

Six years of related experience in lieu of degree

Tools

Palo Alto Networks

Imperva

McAfee

Rapid7

Nessus

Nexpose

Metasploit

Burp Suite

IDA Pro

ArcSight

Splunk

QRadar

SolarWinds LEM

Job description

Univera Healthcare in Rochester, NY seeks an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. This role provides risk management, compliance services, and consulting across business lines, covering Security Operations, Governance, Risk and Compliance, and Identity and Access Management.

The position involves design and operation of security infrastructures, on-call rotation, and support for HIPAA, PCI, and COBIT