Security Engineer

HealthPoint (CHC); Plum (Allegheny County); On-site; USD 97,000 - 158,000; Full time

Benefits offered by this job

Medical, Dental, Vision

Retirement plan with employer match

Paid time off

Job summary

HealthPoint is a community-based health center network seeking a Security Engineer to design and implement digital security protecting vital information. The role evaluates gaps, recommends solutions, and provides strategic guidance across security leadership, compliance, and IS teams.

Compensation is dependent on skills and experience. The position involves developing security measures, supporting cybersecurity architecture, and incident response across on-prem and cloud environments.

Qualifications

• Bachelor's degree in CS, information security, or related field; 3–5 years in IT; 1–2 years in security.
• Strong customer service orientation and communication; ability to read/interpret industry docs.
• Experience with healthcare security; working with business teams is preferred.

Responsibilities

• Develop, execute, and track security measures to protect information, network infrastructure and computer systems.
• Support the design of HealthPoint’s security strategy and engineer comprehensive cybersecurity architecture.
• Identify, define, and document system security requirements and recommend solutions to management.
• Respond to system security incidents, including investigation, countermeasures, and recovery actions.
• Conduct log-based and endpoint-based threat detection to identify threats from multiple sources.
• Monitor cyber assets and critical infrastructure to ensure system uptime.

Skills

Security engineering

Incident response

Threat hunting

Network monitoring

Cloud security

Education

BS in Computer Science / Information Security

Tools

CrowdStrike

Microsoft Azure

Proofpoint

NextGen EHR

Job description

Salary Range: $96,680.00 to $157,590.00 USD

Would you like to have a career that makes a daily difference in people’s lives? Do you want to be part of a caring, respectful, diverse community? If you answered yes to these questions, keep reading!

HealthPoint is a community-based, community-supported and community-governed network of non-profit health centers dedicated to providing expert, high-quality care to all who need it, regardless of circumstances. Founded in 1971, we believe that the quality of your health care should not depend on how much money you make, what language you speak or what your health is, because everyone deserves great care.

Position Summary:

The Security Engineer designs and implements digital security that protects vital information. This position evaluates and identifies potential security gaps and threats in HealthPoint’s current service landscape and recommends and implements solutions. The Security Engineer provides strategic guidance to the information security leadership division, compliance department, and Information Services team, and promotes and fosters adoption of information security and security standards across HealthPoint.

Compensation is dependent on skills and experience.

Your contribution to the team includes:

• Develop, execute, and track the performance of security measures to protect information, network infrastructure and computer systems.
• Support the design of HealthPoint’s security strategy and engineer comprehensive cybersecurity architecture.
• Identify, define, and document system security requirements and recommend solutions to management.
• Respond to system security incidents, including the investigation of, countermeasures to, and recovery from computer-based attacks, unauthorized access, and policy breaches.
• Conduct log-based and endpoint-based threat detection to detect and protect against threats coming from multiple sources.
• Conduct network monitoring and intrusion detection analysis using various computer network defense tools, such as intrusion detection/prevention systems, firewalls, and host-based security systems.
• Correlate activity across assets (endpoint, network, apps) and environments (on-premises, cloud) to identify patterns of anomalous activity.
• Monitor cyber assets and critical infrastructure to ensure system up-time.
• Participate in exercises that test policies, procedures and skills which are required by business and critical operations.
• Works with threat intelligence and/or threat-hunting teams to investigate and mitigate cyber threats.
• Assist with remediation effort, fixing all deficiencies found during investigations
• Supports the creation of business continuity/disaster recovery plans, including conducting disaster recovery tests, publishing test results, and making changes necessary to address deficiencies.
• Correlate network, cloud, and endpoint activity across environments to identify attacks and unauthorized use.
• Provides users with incident response support, including mitigating actions to contain activity and facilitating forensics analysis when necessary
• Maintains good attendance, is punctual and works full scheduled shift is a condition of employment.
• Demonstrates respectful, professional, and appropriate behavior that supports a team-oriented work environment.
• Demonstrate a commitment to the mission, core values and goals of HealthPoint and its healthcare delivery including the ability to integrate values of justice, respect, compassion, excellence and stewardship into appropriate programs and services.
• Other duties as assigned by supervisor.

Must have’s you’ll need to be successful:

• Bachelor of Science (BS) in Computer Science, Information Security, Cybersecurity, or in a related field or equivalent. 3-5 years of experience in Information Services / Information Technology and 1-2 years of experience in Information Security and/or Cybersecurity. Highly desired experience includes managing email filtering and security, 3-5 years of experience in healthcare industry and working with business teams.
• Excellent customer service orientation and positive communication style. Ability to read, analyze and interpret common industry related journals, financial reports, and legal documents. Ability to respond to common inquiries from customers. Ability to write reports that are clear, concise, and thorough and conform to prescribed style and format.
• Ability to recognize problems in broadly defined work situations that are complex, diverse, and occasionally unprecedented. Ability to effectively establish the facts, draw valid conclusions from the data, and then develop appropriate methods and strategies to bring out the desired solution to the problem(s) identified.
• Demonstrated operating knowledge of computers. Knowledge of NextGen (Electronic Medical Record), experience with CrowdStrike Security software, Microsoft Azure Cloud, and Proofpoint highly desired.
• Valid Washington State Driver’s License with an acceptable driving record determined by HealthPoint’s insurance carrier.

Proof of vaccination for COVID-19 is required, prior to start. HealthPoint does not accept the Johnson & Johnson COVID-19 vaccine as proof of vaccination. If you have received the Johnson & Johnson vaccine, we ask that you provide documentation demonstrating proof of an alternate COVID vaccine or vaccine series. All new employees are also required to show proof of immunizations and/or immunity to MMR (measles, mumps, rubella), Varicella, annual Influenza and TB QuantiFERON Gold Titer. Additionally, if you work in a HealthPoint clinic, Tdap (within last 10 years) is required. Hepatitis B. is required for clinical employees with potential exposure to blood/blood products. All immunizations are a condition of employment. Upon hire, employees must provide proof of their immunizations and/or immune titer results prior to starting or no later than their fifth (5) business day of employment.

Where to gather your records:

• If you are providing immunizations from an electronic health record, please ensure that you obtain a copy of your full records rather than a screenshot. Each page of your records should include your first and last name, date of birth, and the name of the health system from which the records are pulled.
• If records do not show any data, please seek guidance from your provider for further assistance.
• If you are unable to provide proof as noted above, you can choose to have a lab titer drawn to check immunity or to be re-vaccinated. If you receive vaccination(s) or lab titers, you may obtain them through HealthPoint at no cost to you. This is a great opportunity to get your immunization record up to date at no additional expense.

HealthPoint is committed to offering all employees a competitive compensation package, including benefits and several other perks.

• Medical, Dental, and Vision for employees and their families/dependents
• HSA, FSA plans
• Life Insurance, AD&D and Disability Coverage
• Employee Assistance Program
• Wellness Program
• PTO Plan for full-time benefited employees. During 0 - .99 years of service, PTO accrual is 5.23 hours per pay period.
• Extended Illness Time Away of 40 hours
• 8 holidays and 3 floating holidays
• Compassion Time Away up to 40 hours
• Opportunity Time Off (extended time off for staff to invest in themselves) up to 8 weeks
• Retirement Plan with Employer Match
• Voluntary plans at a discount, such as life insurance, critical illness and accident insurance, identity theft insurance, and pet insurance.
• Development and Growth Opportunities

To learn more about HealthPoint, go to www.healthpointchc.org! #practiceyourpassion

It is the policy of HealthPoint to afford equal opportunity for employment to all individuals regardless of race, color, religion, sex (including pregnancy), age, national origin, marital status, military status, sexual orientation, because of sensory, physical, or mental disability, genetic information, gender identity or any other factor protected by local, state or federal law, and to prohibit harassment or retaliation based on any of these factors.