Cybersecurity Engineer Sr. Incident Response

About the role

Works independently or with other Cybersecurity Engineers to design and maintain cybersecurity systems through standard operating procedures, processes, and guidelines.

Responsibilities

• Leads efforts to assess risk, add new architectures, controls, and services including mentoring to other teammates.
• Maintains confidentiality, integrity, and availability of the computing environment and enforces the Acceptable Use Policy.
• Provides guidance and input to management on changes needed to policies and procedures.
• Participates in incident response and provides recommendations as directed by management.
• Monitors all cybersecurity systems, solutions, or services and identifies potential issues and works to resolve identified issues while also assisting other teammates.
• Adheres to the confidentiality of investigations, incidents, and forensics reviews.
• Manages cybersecurity projects, assists other teammates, and provides reporting to leadership.
• Leads cybersecurity projects with autonomy, including 3rd party security reviews, DLP solutions, proxies, identifying risk, vulnerabilities, remote access requests, biomedical device reviews, product selection packages, and other projects or duties defined by management.
• Provides cybersecurity training and performs presentations to large audiences on cybersecurity topics.
• Works with sensitive information and engages with Privacy, the Legal Department, and law enforcement, where directed by leadership.

Requirements

• Bachelor's Degree or equivalent knowledge.
• 5 years of progressive IT experience (or related field) with exposure or experience in Cybersecurity.
• Preferred remote locations in IL, WI, NC, GA.
• Must be located in one of the following states: AL, AK, AR, AZ, DE, FL, GA, IA, ID, IN, IL, LA, KS, KY, ME, MI, MO, MS, MT, NC, ND, NE, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, WI, WV, WY.

Skills

• Proficient in Microsoft Outlook, Excel, Word, Teams, and PowerPoint.
• Deep understanding and practical experience with HIPAA, cybersecurity frameworks (NIST CSF), PCI DSS, NIST (SP) 800-82r3, and associated methodologies.
• Experience troubleshooting, reasoning, and using problem solving skills to offer solutions to complex problems across all systems.
• Ability to work individually or as part of a team and to assist other teammates.
• Must be able to multi-task and adapt to rapidly changing priorities in a dynamic work environment while producing quality results and assisting other teammates.
• Deep understanding and practical experience in security technologies, including Security Information and Event Management (SIEM), Vulnerability Scanners, Firewalls, VPNs, Proxies, Secure Email Gateways, Endpoint Detection and Response, Data Loss Prevention, Exact Data Matching, Medical Device Management and OT/IoT Solutions, risk management platforms, eDiscovery, Dark Web Monitoring, Remote Access Technologies, Risk Analysis.
• Deep understanding and practical experience with security protocols and standards, including SFTP, TLS, SSH, AES, etc.
• Strong verbal and written communications skills and the ability to effectively communicate at all levels.

Physical Requirements And Working Conditions

This is a remote position that requires travel, therefore, will be exposed to weather and road conditions. Operates all equipment necessary to perform the job. Exposed to a normal office environment. Must be available for callback support on a regular basis including travel to facilities located in various states. Ability to sit for extended periods of time. Extensive evening and weekend hours may be required during incidents, major project go-lives, or during downtimes. Ability to lift and carry objects up to 40 pounds.