Security Engineer

Asante; Medford (OR); Remote; USD 80,000 - 110,000; Full time

Job summary

An innovative healthcare provider is seeking a Security Engineer to enhance its information security program. This role focuses on developing and implementing security controls while managing identity and access management through the SailPoint platform. The ideal candidate will possess a strong background in information security, with at least three years of experience and a solid understanding of security best practices. You will join a collaborative team dedicated to protecting sensitive data and ensuring compliance with industry standards. If you are passionate about security and eager to contribute to a mission-driven organization, this opportunity is perfect for you.

Benefits

Health plans including medical, dental, and vision

Retirement package with up to 6% employer contribution

Generous earned time off (ETO)

Tuition reimbursement and repayment plans

Qualifications

• 3+ years of experience in information security.
• Broad knowledge of security controls and vulnerability management.

Responsibilities

• Develop and maintain information system security controls.
• Identify and report on security vulnerabilities.

Skills

Information Security

Identity and Access Management (IAM)

Vulnerability Management

Analytical Skills

Communication Skills

Secure Architecture

Education

Bachelor's degree in Computer Science

Equivalent experience in lieu of degree

Tools

InsightVM

SailPoint Identity Security

Job description

Security Engineer

Additional Position Details: FTE: 1.0 | Full Time | Primarily Mon - Fri / Day shift

PLEASE NOTE: This is a remote position. Candidates will be required to have reliable broadband internet and personal cell phone service. Remote work may include working day-to-day operations during Pacific Standard business hours or online training. Candidates must live within the United States and due to our pay practices, we are not able to employ candidates living in some states.

Position Summary

The Security Engineer is responsible for the development, implementation, and maintenance of information system security controls in support of Asante policies and procedures, relevant regulatory guidelines, and current industry best practices. Additionally, this position is responsible to help identify, classify, scan, and report on security vulnerabilities and misconfigurations within Asante's infrastructure. The Security Engineer is an integral member of a strong technical team that uses many bests in breed tools to support the information security program at Asante and serves as a technical resource available to other technical teams and is an incident escalation position.

This Security Engineer role will have a specialized focus on Identity and Access Management (IAM), with an emphasis on applying IAM principles and best practices to support the SailPoint Identity Security platform. The engineer will play a key role in maintaining and enhancing the SailPoint application, including lifecycle management, access request workflows, policy enforcement, and access certifications. This position requires a solid understanding of IAM concepts such as provisioning, deprovisioning, role-based access control (RBAC), privileged access management (PAM), and identity governance to ensure secure and efficient access to systems and applications across the organization.

Qualifications

Education

• Bachelor's degree in Computer Science, Cybersecurity, Information Technology - OR - the equivalent in experience in lieu of degree (additional years of experience are required if no degree).

Required Experience/Skills/Abilities

• A minimum of 3 years of experience in information security.
• Broad range of security knowledge with knowledge of firewalls, hardware security modules, SIEM development for threat prevention and detection.
• Proficient with vulnerability management solutions such as InsightVM and open source.
• Exceptional analytical and investigative abilities with hands-on experience leading root cause analysis.
• Familiarity with typical communication protocols, e.g., TCP/IP, HTTP/HTTPs/Websocket, etc.
• Strong understanding of secure architecture and design, threat modeling, and the ability to clearly articulate best practices and mitigations for application security.
• Strong communication skills, both written and verbal.
• Knowledge of industry best practices for information security control design.

Additional Requirement

• Must not have any convictions for security/privacy/compliance related crimes.

Preferred Certifications

• Industry certifications such as CISSP, OSCE, OSCP, GSEC.

Total Rewards Package

• Earn a competitive and progressive salary.
• Benefit from health plans that are focused on health and wellness including medical, dental, vision and wellness beginning within 30 days of hire.
• Plan for your future with a retirement package that includes up to 6% employer contribution.
• Experience a healthy work-life balance with our generous earned time off (ETO).
• Continue to enhance your education through our tuition reimbursement and tuition repayment plans.

At Asante, we are guided by our values below. Explore Asante more by visiting www.asante.org/careers

Excellence - Respect - Honesty - Service - Teamwork

Asante is an equal opportunity employer. We are committed to employ and advance in employment women, minorities, qualified individuals with disabilities and protected veterans.