Senior Security Engineer

Akron Children's; Akron (OH); On-site; USD 110,000 - 140,000; Full time

Job summary

Akron Children's is seeking a Sr Security Engineer to mature the Risk Management and Incident Response areas within the Cybersecurity program. The role conducts risk assessments of third parties, systems, and cloud deployments, and leads tabletop exercises with remediation of gaps identified.

The incumbent interfaces with staff at all levels to strengthen security controls. Responsibilities include policy maintenance, tool evaluation, and integration of security practices across healthcare

Qualifications

• Bachelor's degree in a related field is required.
• CEH, CISSP, GCIH, GSEC or similar security certification required.
• 2-3 years of leadership/supervisory experience preferred.
• Experience with risk assessment, incident management and governance.

Responsibilities

• Assist with implementing and improving the information security program.
• Maintain information security policies, procedures, and standards.
• Conduct periodic risk analyses and risk management assessments.
• Develop and coordinate application security reviews and manage vulnerabilities/incidents.
• Evaluate, select, and implement information security tools.
• Collaborate with staff at all levels in a fast-paced, high-pressure environment.
• Prepare reports, dashboards, and documentation for stakeholders.

Skills

Risk management

Incident response

Security governance

Policy & procedures

Education

Bachelor's degree in related field

Security certification (CEH/CISSP/GCIH/GSEC)

Tools

MS Office suite

Visio

SharePoint

Job description

Full-time, 40 Hours/week

M-F Days

Remote - Must reside in Ohio (onsite requirement once a month)

Summary

The Sr Security Engineer is an integral part of the Cybersecurity program. This position will be responsible for maturing the Risk Management, and Incident response areas. This will be accomplished by conducting risk assessment of third parties, systems & equipment being placed on the network and cloud systems. Incident Response duties include organizing table top exercise and working with other staff on remediation of gaps identified. Day to day this position will interface with staff at all levels of the organization.

Responsibilities

• Assists with the implementation, execution and continuous improvement of the Information Security Program including but not limited to: Policy and Document Maintenance, Risk Assessment, Security Controls and Technical Oversight.
• Maintains information security policies, procedures, and standards.
• Conducts periodic risk analysis and risk management assessments.
• Develops and coordinates application security reviews and is responsible for vulnerability and incident management.
• Responsible for evaluation, selection, and implementation of information security tools.
• Ability to problem solve/remediate in a highly complex and matrixed environment.
• Ability to successfully work in a fast-paced environment with a variety of personalities and work styles.
• Ability to successfully work well under pressure with tight deadlines and with a sense of urgency.
• Possess excellent written, oral, and active listening skills.
• Other duties as required.

Technical Expertise

• Experience in HIPAA, HITECH, PCI, NIST, and other frameworks is required.
• Experience in securing information system technologies is required.
• Experience with both Technical Security Engineer and Governance, Risk and Compliance (GRC) is strongly preferred.
• Experience working with all levels within an organization is required.
• Experience in healthcare is preferred.
• Proficiency in MS Office [Outlook, Excel, Word] or similar software is required.
• In-depth knowledge of security concepts such as cyber-attacks and techniques, threat vectors, risk management, incident management etc.
• Experience with an organization's privacy and security due diligence efforts when entering into third party relationships or M&A activities a plus.
• Knowledge of various operating system flavors including but not limited to Windows, Linux, Unix
• Knowledge of applications, databases, middleware to address security threats against the same.
• Proficient in preparation of reports, dashboards and documentation
• Excellent communication and leadership skills
• Ability to handle high pressure situations with key stakeholders
• Good Analytical skills, Problem solving and Interpersonal skills
• Ability to adapt and thrive in a dynamic work environment. Exceptional organization skills, ability to work independently as well as part of a team, and demonstrated experience in taking initiative and following up on tasks.
• Proficiency in MS Office [Outlook, Excel, Word, Visio, and SharePoint] or similar software is required.

Education And Experience

• Education: Bachelor degree in related field is required.
• Security Certification Required: CEH, CISSP, GCIH, GSEC, or similar level security certification
• 2-3 years leadership/ supervisory experience preferred

Full Time

FTE: 1.000000

Status: Remote