Security Software Configuration II Engineer

BJC HealthCare; St. Louis (MO); Remote; USD 80,000 - 120,000; Full time

Job summary

An innovative healthcare organization is seeking a Security Software Configuration II Engineer to enhance its security infrastructure. This remote role focuses on operational innovation and security guidance, ensuring compliance with various regulations like HIPAA and PCI. You'll be part of a dynamic engineering team that develops tools for protection and investigations, supporting multiple projects and educating staff on best practices. If you're passionate about security and eager to make a significant impact in a large nonprofit healthcare setting, this opportunity is perfect for you.

Qualifications

• 2-5 years of relevant experience in security engineering.
• Bachelor's Degree or equivalent experience required.

Responsibilities

• Participate in security projects to improve infrastructure.
• Conduct vulnerability assessments and design risk strategies.

Skills

Security Mindset

Operational Innovation

Risk Mitigation Strategies

Incident Response

Vulnerability Assessments

Education

Bachelor's Degree

Tools

HIPAA Compliance

GLBA Compliance

PCI Compliance

SOX Compliance

Information Systems Management

Job description

Additional Information About the Role

BJC is hiring for a Security Software Configuration II Engineer. This is a remote position, primarily for MO or IL residents.

We seek a security-minded individual capable of thinking outside the box. The engineering team develops tools for protection and investigations across the organization, supporting teams like SIRT, TVM, and GRC. There is a Level 1 team providing operational support for the Level 2 Engineering team. We also support other teams, educate on best practices, and secure configurations. The team manages multiple projects, troubleshoot various systems, and advise on security matters. Broad IT experience is preferred. No specific licensure or certification is required at hire.

Overview

BJC HealthCare is one of the largest nonprofit health care organizations in the U.S., serving residents mainly in the greater St. Louis, southern Illinois, and southeast Missouri regions. With revenues of $6.3 billion and over 30,000 employees, BJC provides inpatient and outpatient care, primary care, community health, and more across 14 hospitals and multiple community locations.

BJC is the largest provider of charity and community benefits in Missouri, contributing $785.9 million annually, including $410.6 million in charity care. BJC partners with Washington University School of Medicine, providing access to advanced medical science and technology.

IS Security Services acts as an independent body to implement controls that protect BJC's information resources, ensuring compliance, evaluating controls, educating staff, and investigating security practices.

Preferred Qualifications

Role Purpose

The Security Software Configuration - Engineer II supports the architecture, deployment, and operation of secure application infrastructure aligned with business needs. The role involves operational innovation, security guidance, and delivering resilient applications at scale. Knowledge of architecture, engineering, design principles, and handling diverse applications is essential. Epic or relevant certifications are required within six months of hire.

Responsibilities

• Participate in security projects to evaluate and improve infrastructure, delivering within scope, budget, and SLAs.
• Assist with incident response, system stability, and support outside regular hours as needed.
• Implement solutions compliant with HIPAA, GLBA, PCI, SOX, and privacy laws.
• Conduct vulnerability assessments, perform business impact analyses, and design risk mitigation strategies.
• Specify testing requirements, review results, and create reports. Support deception techniques based on pattern analysis.
• Handle incidents according to procedures, diagnose, escalate, recover, and document resolutions. Contribute to incident management improvements.
• May participate in after-hours on-call rotations.

Minimum Requirements

Education

• Bachelor's Degree or equivalent experience

Experience

• 2-5 years of relevant experience

Preferred Requirements

Education

• Bachelor's Degree

Experience

• 10+ years of relevant experience

Licenses & Certifications

• Information Systems Manager
• CISSP
• Certified Ethical Hacker (CEH)
• Healthcare Information Security