Info Systems Security - Sr

Overview

Primary

Purpose:

The primary responsibility of this position is to ensure the confidentiality, availability, and integrity of Parkland's data, computer systems, and network devices by recommending, implementing, and utilizing security defense systems to reduce the opportunity of cyber attacks.

• Education:
  
  Must have a Bachelors degree in Management Information Systems.
• Experience:
  
  Must have six years of experience in an information systems security domain with a background in mobile device security, endpoint protection, wireless protection, vulnerability management, incident response and mitigation, threat research and cyber intelligence analysis, or other cyber security domain.
• Equivalent Education and/or
  
  Experience:
  
  May have an equivalent combination of education and experience to substitute for both the education and the experience requirements.
• Certification/Registration/Licensure:
  Must have a current CompTIA Security+ certification or equivalent within 6 months of placement; CISSP preferred.

• Knowledge of NIST, HITRUST, PCI, HIPAA Security Rule, and associated common security frameworks.
• Professional experience in a system administration role supporting multiple platforms and applications.
• Ability to perform complex research to determine industry-standard products and solutions in response to security requirements.
• Ability to develop project plans, organize and monitor tasks, and produce quality results in a timely manner.
• Ability to perform technical risk assessments and implement corrective actions regarding the safeguarding of information systems.
• Independent implementation and maintenance of complex information security tools, providing guidance to technical staff on proper use of the tools.
• Superior writing skills and the ability to communicate effectively.
• Working knowledge of:
  • Local area networks
  • Microsoft Active Directory / GPO
  • Data Loss Prevention
  • Encryption Technologies
  • Intrusion Detection Systems
  • Intrusion Prevention Virtual Private Network
  • Linux Operating Systems
  • Windows Operating Systems
  • Communication Protocols
  • Multi-factor authentication
  • Cloud Access Security Broker
  • Endpoint Detection and Response Technologies
  • Security Information and Event Management Tools
• Advanced working knowledge of network and vulnerability assessments, malware analysis, threat intelligence, and vulnerability management.
• Ability to listen and communicate effectively with executive-level staff and leadership teams.
• Direct experience with anti-virus software, intrusion detection, firewalls, and content filtering.
• Experience with hacker techniques and network security principles.

• Research and investigate the potential impact of new threats and exploits; conduct log analysis and other network forensic investigations.
• Identify, design, and execute security projects that improve detection and response capabilities.
• Collect threat intelligence and automate systems to consume threat feeds and track adversaries.
• Develop alerting and detection strategies to investigate any unusual behavior.
• Conduct network security scans and penetration tests to detect cybersecurity threats and identify weaknesses that may be exploited by malicious parties.
• Perform implementation analysis and technical risk assessments on systems to ensure conformity to current security standards and operational support requirements.
• Manage on-time delivery of assigned tasks against existing plans and schedules.
• Design, implement, and support information security tools and infrastructure systems maintained by the Parkland Information Security Organization (e.g., web filtering technology, IDS/IPS appliances, SIEM tools, anti-spam/anti-virus systems, data leakage appliances, content screening servers, VPN systems, and firewalls).
• Maintain knowledge of applicable rules, regulations, policies, laws, and guidelines that impact Parkland; participate in the creation of effective security controls designed to promote adherence with applicable laws and accreditation agency requirements.
• Stay abreast of new developments in technology and security by attending seminars/workshops, reading professional journals, and actively participating in professional organizations; integrate knowledge gained into current work practices.

977160

Mid-Senior level

Full-time

Information Technology

Hospitals and Health Care