Senior Information Security Engineer

University of Chicago Medical Center; Darien (CT); Remote; USD 100,000 - 130,000; Full time

Job summary

Join a leading academic healthcare system as a Senior Information Security Engineer. This remote role involves enhancing network security, assisting in incident response, and developing security procedures. Candidates should have extensive experience in information security and strong communication skills.

Qualifications

• 8 years of Information Security experience required.
• In-depth knowledge of Next Generation Firewalls and Cloud architectures.
• Effective written and verbal communication skills.

Responsibilities

• Lead efforts in enhancing network and Cloud security architecture.
• Assist Incident Response and document process improvements.
• Develop project plans for security-related projects.

Skills

Communication

Scripting

Education

BS or BA degree in Computer Science

Tools

Next Generation Firewalls

Web Application Firewalls

Cloud environments

Job description

Job Description

Join a world-class academic healthcare system, UChicago Medicine, as a Senior Information Security Engineerin our Information Security department. This is a remote, work from home opportunity and you may be based outside of the greater Chicagoland area.

This role will be that of a Senior Information Security Engineer. This person will lead our effort in enhancing and maturing our defensible architecture across our network and Cloud solutions. Besides the network related tasks, this role will also assist Incident Response as needed and will require solid written skills to document improvement to processes and procedures. This role will also be primarily responsible for the creation of Standard Operating Procedures for our SOC operations related to all Network Security solutions implemented by you.

Under general direction of Information Security leadership, implement and operate security controls to minimize risk to physical and logical assets of the University of Chicago Medical Center and to ensure the confidentiality and integrity of UCMC sensitive information. The Information Security Engineer will assist with the core security activities of UCMC and lead many enhancement projects. This includes but is not limited to design and implementation of enterprise network security systems, security operations, threat analysis, log and event management, and network monitoring.

Essential Job Functions

• Primary subject matter expert for all Network Security related functions, including Defense-in-Depth strategies and Cloud related defensible architectures.

• Assist other security engineering and consulting needs as they arise.

• Develop project plans and manage project team for security related projects.

• Provide communications, including status reporting, risk management, escalation of issues, and in general, making sure the project is delivered on budget, on schedule, and within scope.

• Other duties as assigned.

Required Qualifications

• BS or BA degree in Computer Science or other IT related field, or combination of education and work experience

• 8 years of Information Security experience required, preferably at least 3 years in a Senior or Lead Engineering role

• In-depth knowledge of Next Generation Firewalls (NGFW) such as Palo Alto, Fortinet or Checkpoint

• 5 years’ experience maintaining and designing Defense-in-Depth strategies for complex network architectures

• Good working knowledge of Web Application Firewalls (WAF)

• In-depth knowledge of network routing and defensible architectures in Cloud environments, such as Azure, AWS or Google Cloud

• In-depth knowledge of computing systems, data network communications, and network architecture

• Effective written and verbal communication skills

• Good working knowledge of the Plan, Build, Run model within an IT environment

• Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed

• Expert understanding of TCP/IP (OSI Layers 1– 4) and Internet and Intranet technologies required (OSI Layers 5-7)

• Good knowledge of Windows and Linux Operating Systems

• Good knowledge of vulnerability management, risk analysis, and forensics preferred

• Experience with HIPAA, NIST, FERPA, and SOX preferred

Position Details

• Job Type/FTE: Full-time

• Shift: Days

• Location: Remote

• Department: Information Security

• CBA Code: Non-Union

Why Join Us

We’ve been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We’re in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you’d like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we’re doing work that really matters. Join us. Bring your passion.

UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at:UChicago Medicine Career Opportunities.

UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.

Must comply with UChicago Medicine’s COVID-19 Vaccination requirement as a condition of employment. If you have already received the vaccination, you must provide proof as part of the pre-employment process. This is in addition to your compliance with the Flu Vaccination requirement as well. Medical and religious exemptions will be considered consistent with applicable law. Lastly, a pre-employment physical, drug screening, and background check are also required for all employees prior to hire.

Compensation & Benefits Overview

UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.

The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.

Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine.