InfoSec & Cybersecurity Engineer (Remote)

Univera HealthСare in; City of Rochester (NY); Hybrid; USD 60,000 - 142,000; Full time

Job summary

Univera Healthcare seeks an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. You will provide risk management services, compliance support, and security consulting across lines of business, covering Security Operations, GRC, and IAM disciplines.

The role involves implementing security controls, auditing, and assisting in the maturation of the information security program across multiple domains, while ensuring

Qualifications

• Bachelor's degree in computer science, information technology, or relevant field; or six years of related experience.
• Experience with mainframe/Windows/UNIX operating systems is preferred.
• Familiarity with security controls and vulnerability management tools.
• Knowledge of security frameworks and common web app vulnerabilities.

Responsibilities

• Design, implement, and operate organization-wide security infrastructures.
• Provide risk management and compliance services across IT systems.
• Support security operations, audits, and monitoring activities.
• Act as SME for information security technologies and practices.
• Consult with management and security teams to improve security posture.

Skills

Security operations

Governance

Compliance

Identity and access management

Risk management

Vulnerability management

Encryption

PKI

Network security

Firewall concepts

SIEM

Security frameworks

Education

Bachelor's degree in computer science or information technology

Tools

Palo Alto Networks

Imperva

AD / LDAP

McAfee

Nessus

Rapid7

Nexpose

Metasploit

Burp Suite

ArcSight

Splunk

QRadar

Job description

Univera Healthcare seeks an Information Security & Cybersecurity Engineer to develop, maintain, and coordinate the organization's information security program. You will provide risk management services, compliance support, and security consulting across lines of business, covering Security Operations, GRC, and IAM disciplines.

The role involves implementing security controls, auditing, and assisting in the maturation of the information security program across multiple domains, while ensuring