Security Software Configuration II Engineer

BJC HealthCare (New); Missouri; Remote; USD 70,000 - 110,000; Full time

Job summary

Join a leading nonprofit health organization as a Security Software Configuration II Engineer. This remote role focuses on architecting and managing secure application infrastructure, ensuring compliance with critical regulations. The position offers the opportunity to engage in innovative security projects, support incident response, and enhance system stability. With a commitment to community health and cutting-edge medical science, this organization provides an exciting environment for security-minded professionals looking to make a meaningful impact. If you have a passion for security and a drive for excellence, this is the perfect opportunity for you.

Qualifications

• Bachelor's Degree or equivalent experience required.
• 2-5 years of relevant experience preferred.

Responsibilities

• Participate in security projects and ensure compliance with regulations.
• Perform vulnerability assessments and manage incidents.
• Explain security controls and support incident investigations.

Skills

Security Mindset

Innovative Thinking

Incident Response

Risk Analysis

Vulnerability Assessment

Compliance Knowledge (HIPAA, GLBA, PCI, SOX)

Education

Bachelor's Degree

Tools

Security Tools

Job description

Additional Information About the Role

BJC is hiring for a Security Software Configuration II Engineer. This is a remote position, primarily for candidates in MO or IL.

We seek a security-minded individual capable of innovative thinking. The engineering team develops tools for protection and investigations used by SIRT, TVM, and GRC teams. There is a Level 1 team supporting daily operations for the L2 Engineering team. We also assist other teams and promote best practices and secure configurations. The team handles multiple projects simultaneously, troubleshoots across various systems, and provides security advisories. Broad IT experience is essential. No specific licensure or certification is required for this position.

Overview

BJC HealthCare is a leading nonprofit health organization in the U.S., serving the greater St. Louis, southern Illinois, and southeast Missouri regions. With revenues of $6.3 billion and over 30,000 employees, BJC provides comprehensive healthcare services across various settings, including hospitals, clinics, and community health locations.

BJC is the largest provider of charity and unreimbursed care in Missouri, contributing $785.9 million annually in community benefits, including charity care and other assistance programs. The organization collaborates with Washington University School of Medicine, ensuring access to cutting-edge medical science and technology.

IS Security Services plays a crucial role in implementing effective controls to safeguard BJC's information resources, ensuring compliance, evaluating controls, educating staff, and responding to security incidents.

Preferred Qualifications

Role Purpose

The Security Software Configuration - Engineer II is responsible for architecting, deploying, and managing secure application infrastructure aligned with business needs. The role involves supporting operational innovation, providing security guidance, and ensuring resilient application delivery. Knowledge of architecture, engineering, design principles, and handling diverse applications and data systems is required. Epic or relevant certifications should be obtained within six months of hire.

Responsibilities

1. Participate in security projects to evaluate and improve infrastructure, delivering on time and within budget, meeting SLAs. Support incident response and system stability, including outside of regular hours. Ensure solutions comply with regulations like HIPAA, GLBA, PCI, SOX, and privacy laws. Conduct performance testing without disrupting business operations.
2. Perform vulnerability assessments and business impact analyses on medium complexity systems.
3. Explain security controls, conduct risk and impact analyses, identify risks, design mitigations, and support incident investigations.
4. Specify requirements for assessments, review test results, and prepare reports. Use deception techniques to identify patterns.
5. Manage incidents according to procedures, diagnose, escalate, and document resolutions. Participate in after-hours on-call rotation if needed.

Minimum Requirements

Education

• Bachelor's Degree or equivalent experience

Experience

• 2-5 years of relevant experience

Preferred Requirements

Education

• Bachelor's Degree

Experience

• 10+ years of relevant experience

Supervisor Experience

• No supervisory experience required

Licenses & Certifications

• Information Systems Manager Certification
• CISSP
• Certified Ethical Hacker (CEH)
• Healthcare Information Security Certification