Security Engineer, Information Systems, Full Time, Day

04 Valley Health System; United States; On-site; USD 115,107 - 143,874; Full time

Benefits offered by this job

Medical and vision benefits

Life Insurance & AD&D

FSA & commuter benefits

Paid holidays & PTO

Wellness programs

Job summary

Valley Health System is seeking a Security Analyst to help secure its computers and networks. You will maintain information security policies, deliver training, monitor compliance, and conduct security investigations.

You will work with the IS team on business continuity, disaster recovery, and vulnerability assessments, tests, and audits, using firewalls, DLP, IDS/IPS, NAC, proxy filters and scanners.

Qualifications

• Security certifications and HIPAA knowledge required or preferred.
• Experience maintaining security policies and awareness programs.
• Ability to perform risk assessments and incident investigations.
• Familiarity with enterprise security tools and procedures.

Responsibilities

• Participate in planning and design of enterprise security architecture.
• Create and update security documents (policies, standards, baselines).
• Plan and design Business Continuity and Disaster Recovery programs.
• Stay current on security industry developments and threats.
• Recommend new security solutions and enhancements.
• Deploy and configure security tools per SOPs and policies.
• Maintain secure configurations for devices and tools.
• Monitor security solutions and coordinate with SOC.
• Review logs and plan resolutions for security events.
• Participate in investigations and vulnerability assessments.

Skills

Security policy

Security awareness

Incident investigations

Training & education

Vulnerability response

Education

CISSP certification

CompTIA Security+

SSCP certification

GIAC Information Security Fundamentals

Tools

Firewalls

DLP

IDS/IPS

NAC

Web proxy filters

Vulnerability scanners

Malware scanners

Job description

Position Summary

Under the direction of Information Systems Management, the Security Analyst ensures that the Valley Health Systems computers and networks are secured. The Security Analyst is responsible for information security policy maintenance, policy education, security training, security awareness activities, monitoring policy compliance, monitoring compliance, and conducts investigations of security incidents. Working with the Information Systems team, the Security Analyst will monitor, assess, and fine-tune the health systems business continuity and disaster recovery program; as well as perform network penetration tests, application vulnerability assessment scans, and risk assessments. The Security Analyst is responsible for the research, procurement, monitoring, and maintenance, of all the security tools used by the Information Systems staff including: Firewalls, DLP, IDS/IPS, NAC, web proxy filters, vulnerability scanners, malware scanners, and others.

Experience & Security Certifications

• CompTIA Security+
• Certified Information Systems Security Professional (CISSP)
• Systems Security Certified Practitioner (SSCP)
• Information Security Fundamentals (GIAC)
• Strong knowledge of HIPAA, HITECH, & PC Skills

Supervision Exercised None.

Competencies & Security Analyst Responsibilities

• Participate in the planning and design of enterprise security architecture, under the direction of Information Systems Management.
• Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures) under the direction of Information Systems Management.
• Participate in the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan, under the direction of Information Systems Management.
• Maintain up-to-date detailed knowledge of the information technology security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
• Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
• Perform the deployment, integration, and configuration of all security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures and the enterprise's security policies and procedures.
• Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
• Monitor all in-place security solutions for efficient and appropriate operations.
• Work closely with SOC to ensure overall solution is in line with the VHS security approach.
• Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
• Participate in investigations into problematic activity.
• Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
• Provides on-call coverage on a scheduled basis, in emergency situations, and when requested by the department management.
• Performs other duties as assigned.

Job Location

Kraft Center Shift Day (United States of America)

Benefits

Medical/Prescription, Dental & Vision Discount Program (Full Time/Part Time Employees). Group Term Life Insurance and AD&D (Full Time Employees). Flexible Spending Accounts and Commuter Benefit Plans. Supplemental Voluntary Benefits (e.g. Short-term and Long-term Disability, Whole Life Insurance, Legal Support, etc.). 6 Paid Holidays, Paid Time Off (varies), Wellness Time Off, Extended Illness Retirement Plan Tuition Assistance Employee Assistance Program (EAP). Valley Health LifeStyles Fitness Center Membership Discount Day Care Discounts for Various Daycare Facilities.

Salary

Joining Valley Health System means becoming part of a dedicated team that values the highest quality of care in a supportive environment. In our commitment to high performance and reliability, we encourage and recognize exceptional individual performance through our industry leading compensation practices including a starting salary and benefits in accordance with your role, experience, education, and licensure. Actual individual salaries vary depending on these factors. The salary listed does not include other forms of compensation or benefits. Pay Range: $115,107.20 - $143,873.60. The posted pay range reflects the compensation for a full-time equivalent (1.0 FTE).

EEO Statement

Valley Health System does not discriminate on the basis of ancestry, age, atypical hereditary cellular or blood trait, civil union status, color, creed, disability, domestic partnership, gender, gender identity or expression, familial status, genetic information, liability for service in the Armed Forces of the United States, marital status, medical condition or illness, mental or physical handicap, national origin, nationality, perceived disability, pregnancy, race, refusal to submit to genetic testing or make available results of such tests, religion, sex, sexual orientation, veteran’s status or any other protected basis, in accordance with all applicable Federal, State and Local laws. This applies to all areas of employment, including recruitment, hiring, training and development, promotion, transfer, termination, layoff, compensation, benefits, social and recreational programs, and all other conditions and privileges of employment.

Valley Health System is proud of our commitment to improving the lives of our patients, our staff, and the communities we serve. When you join Valley, you’re joining a team of people who believe in delivering quality care in a supportive environment where top performance is both nurtured and recognized. Our culture is built on going the extra mile, doing what’s right, and always striving to be better together.