InfoSec & Cybersecurity Engineer — Protect & Innovate

Capital District Physicians Health Plan Inc; City of Utica (NY); On-site; USD 60,000 - 107,000; Full time

Job summary

Lifetime Healthcare Companies is seeking an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. The role spans Security Operations, Governance Risk and Compliance, and Identity and Access Management.

The position requires evaluating security solutions, supporting 24/7 on-call rotations, and ensuring privacy and regulatory compliance across multiple business lines.

Qualifications

• Bachelor's degree in computer science, Information Technology, or relevant field; or six years of related experience in lieu of degree.
• Hands-on experience with Windows, UNIX, and mainframe environments.
• Knowledge of security controls, vulnerability management, and incident response best practices.
• Familiarity with HIPAA, PCI, COBIT, MAR compliance and governance frameworks.

Responsibilities

• Design, implement, and operate organization-wide security infrastructures.
• Support security technologies and mitigate modern cybersecurity threats.
• Maintain risk management documentation and track remediation actions.
• Support HIPAA, PCI, COBIT compliance activities; participate in audits.

Skills

Encryption

PKI

Network security

AD/LDAP

Endpoint security

Vulnerability scanning

IDS/IPS

SIEM

OWASP

Education

Bachelor's degree in computer science or related field

Experience in lieu of degree (6 years)

Tools

Rapid7

Nessus

Nexpose

Metasploit

AppScan

Burp Suite

IDa Pro

ArcSight

Splunk

Job description

Lifetime Healthcare Companies is seeking an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. The role spans Security Operations, Governance Risk and Compliance, and Identity and Access Management.

The position requires evaluating security solutions, supporting 24/7 on-call rotations, and ensuring privacy and regulatory compliance across multiple business lines.