IT Security Engineer II

MedImpact Healthcare Systems, Inc.; San Diego (CA); On-site; USD 110,982 - 199,769; Full time

Benefits offered by this job

Medical Insurance

Dental Insurance

Vision Insurance

Wellness Programs

Paid Time Off & Holidays

401(k) with Company Match

Life and Disability Insurance

Tuition Reimbursement

Employee Referral Bonus

Job summary

MedImpact Healthcare Systems, Inc. is seeking an Information Security Engineer II to design, implement, and monitor enterprise security programs across SECOPS, DEVSECOPS, and Threat Analytics.

You will serve as a process owner for ongoing security activities, protecting data across workstations, servers, and repositories. Ideal candidates have 8+ years of experience in information security, a Bachelor’s degree, and hands‑on knowledge of endpoint management, IAM, vulnerability tooling, and

Qualifications

• BS/BA and 8+ years of experience or equivalent combination, with 4 years as a subject‑matter expert.
• Experience implementing enterprise security controls and policies.
• Knowledge of HIPAA, HITRUST, SOC, GovRAMP, PCI is preferred.

Responsibilities

• Enforce security policy and support security procedures, apps, and systems.
• Lead security tool deployment, automation, and incident response activities.
• Coordinate cross‑functional security tasks with IT and business units.
• Support security awareness and training for staff.

Skills

Problem solving

Customer focus

Time management

Decision quality

Education

Bachelor's degree in a related field

Tools

BigFix

WSUS/SCCM

Symantec

Trend Micro

Patch Management

EDR

Firewall/VPN

Secure Email

Web Server Security

Container Security

Windows/Linux Admin

IAM

Certificate Management

Vulnerability Scanning

Job description

Exemption Status United States of America (Exempt)

Salary $110,982 - $155,376 - $199,769

Position Information Security Engineer II

Job Description

The Information Security Engineer II develops, executes, and monitors enterprise-wide information security from policy through implementation across all security departments including SECOPS, DEVSECOPS, and Threat Analytics. This role includes direct security support for corporate subsidiaries, ensuring that business information remains secure from unauthorized access, inappropriate alteration, and physical threats. The engineer serves as the process owner for all ongoing security activities and is responsible for protecting the confidentiality and integrity of client, employee, and proprietary business information in accordance with federal and state laws and regulations.

Essential Duties and Responsibilities

• Enforce security policy and support security procedures, applications, and systems through documentation and resolution of cases ranging from simple to complex. Recommend changes to existing processes.
• Utilize Endpoint Threat Detection and Response/Hunting toolsets.
• Create requirements for product evaluations and procedures to enhance productivity and effectiveness; provide direct support to business and IT staff on security issues.
• Drive delivery of new and upgraded security applications, systems, and workflows; test new systems for effective operation.
• Lead efforts to proactively maintain and improve the automation, reliability, consistency, and quality of existing IT security tools and environments. Assist in the design, deployment, integration, and configuration of security solutions.
• Ensure confidentiality, integrity, and availability of data on or transmitted through enterprise workstations, servers, application systems, and data repositories.
• Initiate, facilitate, and promote information security awareness activities; disseminate and educate users on policies and practices. Participate in regular security awareness training.
• Work cross‑functionally with internal business units and stakeholders to support business needs; track and document security service requests and completed cases using an automated system.
• Participate in daily activities and reporting required for regulatory and contractual information security obligations; coordinate tasks for security updates and initiatives.
• Participate in security incident investigations; communicate findings to security management. Identify root causes, propose solutions, and close out investigations.
• Maintain up‑to‑date industry knowledge through formal and informal training, industry associations, and research of emerging technologies critical to information security.
• Keep management aware of security issues; handle and/or escalae appropriately.
• Provide guidance and training to less experienced staff.
• Provide IT security consultative support to internal and external clients.
• Manage IT security related projects and assignments as assigned.

Supervisory Responsibilities

No supervisory responsibilities.

Client Responsibilities

Internal and external client‑facing role requiring excellent customer service and interpersonal communication skills. Manage difficult or emotional client situations, respond promptly to client needs, solicit feedback, and meet client commitments.

Qualifications

Education and Experience

B.S./B.A. and 8+ years of experience or equivalent combination, with 4 years as a subject‑matter expert.

Computer Skills

Knowledge of Microsoft Office Suite.

Additional Expertise

• Endpoint Management (BigFix, WSUS/SCCM, Symantec, Trend Micro, etc.)
• Identity and Access Management
• Certificate Management
• Patch Management (Windows and Unix)
• Intrusion Detection and Prevention
• Security Awareness Training
• Mobile Device Management
• EDR (Endpoint Detection and Response)
• Web Content Filtering
• Device Encryption
• Vulnerability Assessment Tools
• Firewall and VPN
• Secure E‑mail, Anti‑SPAM
• Web Server Applications
• Web API Service Security
• Business Continuity (Disaster Recovery)
• Compliance and Audit (HIPAA, HITRUST, SOC, GovRAMP, PCI)
• OS Administration (Windows, Linux, Unix)
• Authentication and SSO
• Container Security

Certificates, Licenses, Registrations

• Security certification strongly preferred.
• OWASP, ISSA, or ISACA membership a plus.

Competencies

• Composure
• Decision Quality
• Organizational Agility
• Problem Solving
• Customer Focus
• Drive for Results
• Peer Relations
• Time Management
• Dealing with Ambiguity
• Learning on the Fly
• Political Savvy

Benefits

• Medical, Dental, Vision, Wellness Programs
• Paid Time Off, Company Paid Holidays
• Incentive Compensation
• 401(k) with Company Match
• Life and Disability Insurance
• Tuition Reimbursement
• Employee Referral Bonus

Equal Opportunity Employer

Male/Female/Disabilities/Veterans

Disclaimer

The above statements describe the general nature and level of work performed by people assigned to this classification and are not intended to constitute an exhaustive list of all responsibilities, duties, or skills required.