Senior Security Engineer

Job Purpose:

The Senior Security Engineer is a direct report to Senior Director of IT Infrastructure and will have primary responsibility for implementation and oversight of a SIEM platform with a specific focus on managed detection and response. You will be working on building a SIEM solution from the ground up, helping ensure that Shields Health Solutions has the appropriate security safeguards in place enabling certification with HITRUST.

The role will focus on ensuring that all Shields infrastructure is secure and aligns the organization to achieve HITRUST certification and HIPAA compliance. The candidate should be able to demonstrate proficiency with DLP, establishing a vulnerability management program, managing a SOC solution with specific focus on leading proactive security changes within Shields Information Technology team. You will also work closely with the rest of Shields IT team to lead security investigations and identify root cause of security incidents.

Job Duties:

• Leading the implementation of a SIEM solution, and subsequently transitioning to day to day oversight
• Establishing and maintaining security standards for each operating system deployed at Shields
• Daily monitoring of security alerts with subsequent investigation and closure of tickets for critical and high events
• Management and oversight of our DLP system, as well as fine tuning policies and responding to tickets for exception requests
• Lead and coordinate cyber security incidents
• Establish and lead the Shields vulnerability management program with emphasis on measurable goals which reflect progress in maturing Shields security posture
• Oversight of endpoint protection with AV deployments and updates
• Experience with microservices and understanding of security alerts that includes malware/phishing, denial of service, unauthorized access, knowledge of security tools that include SIEM, IDS/IPS, log aggregation (SUMO), malware sandboxing, threat hunting, etc.
• Complete client security attestations on an as needed basis

Experience/ Education:

• 4 Year / Bachelor's Degree; Cybersecurity, Computer Science, Information Technology or a related discipline
• 5+ years of security assessment or audit experience
• CISSP, CISA, CISM, or related certification
• Strong Information Security Background with relevant domain and tool knowledge
• Understanding of Security Policies, Standard, and Procedure
• Ability to communicate effectively across functional areas
• Experience with Cloud computing with preference with AWS
• Experience deploying security policies with Microsoft 365 tenants.