Sr. Cybersecurity Engineer ( remote )

AssistRx; Orlando (FL); Remote; USD 90,000 - 120,000; Full time

Job summary

AssistRx is seeking a Cyber Security Engineer to enhance operational security functions and manage security incidents in a dynamic environment. The role involves developing security metrics, managing security requests, and ensuring compliance with regulations like HIPAA and SOC1/2. Candidates should have a strong background in cybersecurity technologies and processes, with a focus on continuous improvement and stakeholder collaboration.

Benefits

Supportive, progressive environment

Competitive pay structure

Matching 401(k) with immediate vesting

Medical, dental, vision, life insurance

Qualifications

• 5+ years of experience in Cybersecurity.
• Strong knowledge of security technologies and processes.
• Excellent communication skills.

Responsibilities

• Manage security requests and incident responses.
• Conduct internal security control testing.
• Develop and maintain security metrics.

Skills

Information Security

Cybersecurity

Risk Management

Incident Response

Vulnerability Management

Network Security

Identity and Access Management

Education

Bachelor's degree in Computer Science

Certifications (e.g. CISSP, CEH)

Tools

SIEM

Office 365 Security

Palo Alto Firewall

Bitdefender

Job description

The Cyber security Engineer utilizes business knowledge and solid technical experience of security to provide a secure environment for the business. Cyber security engineers identify threats and vulnerabilities in systems and software, then apply their skills to developing and implementing high-tech solutions to defend against hacking, malware and ransomware, insider threats and all types of cybercrime.

The successful candidate must demonstrate a strong ability to manage and improve operational security functions, implement risk-based solutions, develop and maintain security metrics, promote security best practices and training across the organization and partner with stakeholders from various IT and business teams. Focus areas will include managing security requests, investigating and responding to alerts and incident tickets, conducting user access reviews, developing and maintaining security documentation, network and endpoint security management, vulnerability management, identity and access management, incident response, SIEM and log management, cloud security operations, overall security monitoring, and reporting. Additionally, the candidate will be responsible for contributing to internal control testing related to client and regulatory audits (e.g. HIPAA, SOC1/2) by gathering and submitting proper technical evidence based on control testing needs and ensuring controls tests are completed comprehensively and on time.

Requirements

• Monitor and manage the Information Security request queue, including analysis and resolution of outstanding issues and process improvement
• Manage endpoint and network security environments including overall health, policy modifications, troubleshooting/resolving issues and producing monthly health metrics for workstations, servers, and identities
• Work directly with the Security Operations Center (SOC) to analyze and resolve security events/alerts. Including:
• monitoring and management of the SIEM platform
• managing the logging health of various log sources (e.g. Windows and Linux systems, cloud infrastructure and services, and network and security infrastructure)
• Works directly with Information Security Engineering and Governance, Risk and Compliance (GRC) resources as needed to investigate and resolve issues
• Supports and manages the vulnerability management platforms for infrastructure and application scanning. Including:
• development and maintenance of scanning policies
• onboarding assets
• reporting
• validation and false positive research
• remediation tracking
• process improvement
• Conduct internal security control testing. Includes gathering, uploading, and reviewing evidence within the GRC (Governance, Risk and Compliance) tool
• Supporting PCI, SOC1/2, HIPAA, and client security assessments
• Manage and maintain Information Security training and awareness campaigns (e.g. training, phishing)
• Developing/monitoring campaigns, ensuring required training is complete, producing reports/metrics and recommending improvements to the current process
  
  
  

Requirements:

• A Bachelor's degree or higher in Computer Science, Electrical Engineering, Information Assurance, Network Security Computer Engineering or a related field, or equivalent experience
• 5+ years of Information Security / Cybersecurity experience
• Strong knowledge of Information Security / Cybersecurity related technologies, processes, and tools
• Working knowledge of Office 365 security concepts, policies, settings, alerting, audit logging, security and compliance center, cloud app security and investigations is required
• Experience identifying assets (e.g. servers, network devices, applications), identifying network layouts and determining security risk and potential solutions
• Security focused degree and/or certifications a plus (e.g. BS/MS in Cybersecurity or related discipline, CEH, OCSP, CISSP, CISA, CompTIA Security+, etc.)
• Familiar with network security concepts and products (e.g. firewall (Palo Alto, Cisco), network (e.g. Cisco, Meraki), email (O365). Cisco Umbrella a major plus)
• Familiar with endpoint security products and concepts (e.g. malware protection, network protection, forensics, DLP, compliance. Bitdefender a plus)
• Familiar with security monitoring (SIEM), analysis and resolution of security events/alarms (AlienVault a plus)
• Familiar with identity and access management concepts (e.g. Azure Active Directory, SSO, user access reviews)
• HIPAA and healthcare experience a plus
• Understanding of SDLC process is a plus
• Excellent oral and written communication skills
  
  
  

Benefits

• Supportive, progressive, fast-paced environment
• Competitive pay structure
• Matching 401(k) with immediate vesting
• Medical, dental, vision, life, & short-term disability insurance
• AssistRx, Inc. is proud to be an Equal Opportunity Employer. All qualified applicants will receive consideration without regard to race, religion, color, sex (including pregnancy, gender identity, and sexual orientation), parental status, national origin, age, disability, family medical history or genetic information, political affiliation, military service, or other non-merit based factors, or any other protected categories protected by federal, state, or local laws
• All offers of employment with AssistRx are conditional based on the successful completion of a pre-employment background check
• In compliance with federal law, all persons hired will be required to verify identity and eligibility to work in the United States and to complete the required employment eligibility verification document form upon hire. Sponsorship and/or work authorization is not available for this position
• AssistRx does not accept unsolicited resumes from search firms or any other vendor services. Any unsolicited resumes will be considered property of AssistRx and no fee will be paid in the event of a hire

Seniority level

• Seniority level

  Mid-Senior level

Employment type

• Employment type

  Full-time

Job function

• Job function

  Other

• Industries

  IT Services and IT Consulting

Referrals increase your chances of interviewing at AssistRx by 2x

Get notified about new Cyber Security Engineer jobs in Orlando, FL.

Omnivise Cybersecurity Solution Architect

Senior/Lead Identity Protection Engineer

We’re unlocking community knowledge in a new way. Experts add insights directly into each article, started with the help of AI.