Senior Cyber Security Engineer

OhioHealth; United States; Remote; USD 130,000 - 170,000; Full time

Job summary

OhioHealth is seeking a Senior Cybersecurity Engineer to serve as the security expert across network, application, system, cloud, and endpoint use cases. You will collaborate with business analysts, architects, vendor partners, and other teams to design and enforce security controls safeguarding enterprise data and systems.

The role includes leading security initiatives, conducting design reviews, and producing technical documentation while staying ahead of evolving threats and industry

Qualifications

• Experience designing and enforcing security controls across multi-domain architectures.
• Ability to assess risk, review designs, and recommend secure solutions.
• Familiarity with HIPAA, CIS, NIST, ISO, HITRUST security standards.
• Strong knowledge of IT service management processes and ITIL framework.
• Understanding of SDLC methodologies including DevOps and agile practices.
• Proven ability to work with architects, analysts, and vendors to improve security.

Responsibilities

• Security Expertise - Serves as the deep technical expert for Cybersecurity principles across network, application, system, cloud, and endpoint use cases.
• Leads Initiatives - Guides teams through technical issues and drives security-enabled business outcomes.
• Collaboration - Works with architects, product owners, and peers to integrate security controls.
• Technical Documentation - Creates and reviews specs and vendor documentation.
• Research and Analysis - Plans and coordinates implementation and maintenance of security initiatives.
• Technology Strategy - Leads development of security strategy and standards for infrastructure technologies.
• Vendor Management - Partners with 3rd party vendors on contracts, dashboards, and performance reporting.

Skills

ITSM & ITIL

Cloud security

Threat modeling & risk

IAM concepts

Encryption methods

Security standards

Secure SDLC knowledge

Vulnerability assessment

Education

Bachelor's Degree

Job description

Job Description Summary:

Reports to Cybersecurity Functional Leader and will have no direct reports.
Senior Cybersecurity Engineer serves as the primary security expert within their respective Cyber
Security specialty, with deep knowledge to apply in the implementation of applications and technology.
Senior Cybersecurity Engineer works closely with the business analysts, architects, vendor partners, and other teams across the IT organization to secure complex applications and services.
Provides technical expertise by designing and enforcing security controls for the application or service architecture which safeguards the integrity and security of the application environment in alliance with architects and other tech leads.
In addition, the incumbent will conduct design reviews, analyze results, and make a recommendation to deliver quality products.

Responsibilities And Duties:

20% Security Expertise - Serves as the deep technical expert for Cybersecurity principles spanning network, application, system, cloud, and end point use cases. Applies security knowledge to identify and assess risk, develop create and secure solutions to protect enterprise data and systems. Adapts to new and emerging technologies.
15% Leads Initiatives - Guides their teams through technical issues and challenges. Leads technology change to deliver security and secure business outcomes while also virtually leveraging subject matter experts from any other needed technical area. Oversees, or consults on, technology implementation and modification activities (for example, projects and products), particularly for new or shared solutions.
10% Collaboration - Works with architects, Business Analysts, Product Owners, and peers providing technical expertise by integrating security controls to ensure the security and integrity of the application environment. Reviews and provides security input into architectural designs and requirements.
10% Technical Documentation - Creates, reviews, and approves technical documentation for applications supported and providing specifications for vendors
10% Research and Analysis - Analyzes, plans, justifies, schedules, and coordinates the implementation and maintenance of the specialty area’s administrative, operational, and financial initiatives including TCO, optimization, and efficiency
25% Technology Strategy - Leads the development of technology strategy and roadmap within a given area of specialty including design, documentation, communication, and implementation of new or existing standards for infrastructure technologies while remaining current on industry trends
10% Vendor Management - Works with 3rd party vendors to negotiate contracts and develop reporting metrics, dashboards, and status reporting to drive outcomes and meet expectations for quality and performance”

As a High Reliability Organization (HRO), responsibilities require focus on safety, quality and efficiency in performing job duties.

The job profile provides an overview of responsibilities and duties and is not intended to be an exhaustive list and is subject to change at any time

Minimum Qualifications:

Bachelor’s Degree

Additional Job Description:

SPECIALIZED KNOWLEDGE

• Knowledge of IT service management (ITSM) and Information Technology Infrastructure Library (ITIL)
• Knowledge of IT standards and controls
• Understanding of information principles and processes
• Understanding of financial models and budgeting
• Understanding of system development life cycle methodologies (such as waterfall, spiral, agile software development, rapid prototyping, incremental, synchronize and stabilize, and DevOps)
• Design and assess security controls for cloud, systems, networks, data controls, and designs
• Assess system and application security threats and vulnerabilities
• Deep knowledge of information assurance (IA) principles and organizational requirements to protect confidentiality, integrity, availability, authenticity, and non-repudiation of information and data.
• Design and assess identity and access management systems, processes, and governance
• Deep knowledge of response and recovery methods and processes, multifactor authentication, and single sign-on
• Deep understanding of encryption methods and standards
• Thorough understanding of security standards including HIPAA, CIS, NIST, ISO, and HITRUST

Work Shift:

Day

Scheduled Weekly Hours :

40

Department

IT Identity Access Management

Join us!
if your passion is to work in a caring environment
if you believe that learning is a life-long process
if you strive for excellence and want to be among the best in the healthcare industry

Equal Employment Opportunity

OhioHealth is an equal opportunity employer and fully supports and maintains compliance with all state, federal, and local regulations. OhioHealth does not discriminate against associates or applicants because of race, color, genetic information, religion, sex, sexual orientation, gender identity or expression, age, ancestry, national origin, veteran status, military status, pregnancy, disability, marital status, familial status, or other characteristics protected by law. Equal employment is extended to all person in all aspects of the associate-employer relationship including recruitment, hiring, training, promotion, transfer, compensation, discipline, reduction in staff, termination, assignment of benefits, and any other term or condition of employment

Remote Work Disclaimer:

Positions marked as remote are only eligible for work from Ohio.