Senior Cybersecurity Engineer

Penn Medicine; Philadelphia (Philadelphia County); Remote; USD 120,000 - 170,000; Full time

Job summary

Penn Medicine is seeking a cybersecurity engineer within the Information Services Cybersecurity Group to advance the technical security program. The role focuses on engineering, monitoring and implementing controls to protect patient data and hospital operations.

You will work with other engineering teams to design secure solutions while aligning with enterprise goals. Ideal candidates possess a strong IT security background, experience with security frameworks, and a track record of influencing

Qualifications

• Bachelor of Arts or Science ComputerScience, Computer Engineering or related field (Required)
• And 6+ years Information Technology experience (Required)
• Demonstrated experience in security research, seminar/conference, writing or community leadership (Preferred)
• Experience with security standards and frameworks such as HIPAA, HITRUST, NIST, etc. (Preferred)

Responsibilities

• Engineers, implements and manages technical cybersecurity controls and countermeasures with a goal of preventing, detecting and eliminating security threats and risk to the organization.
• Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats.
• Acts as a liaison with other engineering groups to ensure that security issues are addressed as systems are being designed and implemented while fully considering enterprise impact to operations teams and obtain their buy-in and support for changes.
• Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Independently develops long term results-driven relationships with external parties, vendors, and solution providers.
• Ability to interact with customers and exceed expectations of customer service, with timely responses, clear communications, and consideration for the impact of cybersecurity activities to the enterprise operations.
• Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures.

Education

Bachelor of Arts or Science ComputerScience, Computer Engineering or related field (Required)

And 6+ years Information Technology experience (Required)

Demonstrated experience in security research, seminar/conference, writing or community leadership (Preferred)

Experience with security standards and frameworks such as HIPAA, HITRUST, NIST, etc. (Preferred)

Job description

Description

Penn Medicine is dedicated to our tripartite mission of providing the highest level of care to patients, conducting innovative research, and educating future leaders in the field of medicine. Working for this leading academic medical center means collaboration with top clinical, technical and business professionals across all disciplines.

Today at Penn Medicine, someone will make a breakthrough. Someone will heal a heart, deliver hopeful news, and give comfort and reassurance. Our employees shape our future each day. Are you living your life's work?

• Entity: Corporate
• Department: CyberSecurity - Engineering
  
• Location: Remote based out of 3535 Market Street, Philadelphia, PA
• Hours: 8hr Days

Summary

Provides advanced planning, engineering, implementation, monitoring, enhancement and analysis capabilities for cybersecurity computer system(s) and applications that are the responsibility of the Information Services Cybersecurity Group, with the primary goal to keep Penn Medicine patients, employees and data secure while enabling the business to provide world class health care services. The role especially is responsible for the highly technical engineering aspect of the cybersecurity program, with a focus on establishing a skill and practical implementation of tools and technologies.

Responsibilities

• Engineers, implements and manages technical cybersecurity controls and countermeasures with a goal of preventing, detecting and eliminating security threats and risk to the organization. Identifies opportunistic improvements to the cybersecurity program through feature enhancement, process development/improvement, automation, technology improvements or other innovative means. Provides tier III complex engineering analysis and cybersecurity focused support for security hardware solutions, security applications, networks and operating systems.
• Identifies security risks, threats, misconfigurations and vulnerabilities of existing networks, systems, applications and develops solutions to remediate identified threats.
• Acts as a liaison with other engineering groups to ensure that security issues are addressed as systems are being designed and implemented while fully considering enterprise impact to operations teams and obtain their buy-in and support for changes.
• Validates and tests complex security architecture and design solutions to produce detailed engineering specifications with recommended vendor technologies.
• Independently develops long term results-driven relationships with external parties, vendors, and solution providers.
• Ability to interact with customers and exceed expectations of customer service, with timely responses, clear communications, and consideration for the impact of cybersecurity activities to the enterprise operations.
• Develops, implements, enforces and communicates security policies and/or plans for data, software applications, hardware and telecommunications.
• Provides complex technical oversight and enforcement of security directives, orders, standards, plans and procedures.

Credentials

• Cert IS Security Professional (Preferred)

Education or Equivalent Experience

• Bachelor of Arts or Science ComputerScience, Computer Engineering or related field (Required)
• And 6+ years Information Technology experience (Required)
• Demonstrated experience in security research, seminar/conference, writing or community leadership (Preferred)
• Experience with security standards and frameworks such as HIPAA, HITRUST, NIST, etc. (Preferred)

We believe that the best care for our patients starts with the best care for our employees. Our employee benefits programs help our employees get healthy and stay healthy. We offer a comprehensive compensation and benefits program that includes one of the finest prepaid tuition assistance programs in the region. Penn Medicine employees are actively engaged and committed to our mission. Together we will continue to make medical advances that help people live longer, healthier lives.

Live Your Life's Work

We are an Equal Opportunity employer. Candidates are considered for employment without regard to race, ethnicity, color, sex, sexual orientation, gender identity, religion, national origin, ancestry, age, disability, marital status, familial status, genetic information, domestic or sexual violence victim status, citizenship status, military status, status as a protected veteran or any other status protected by applicable law.