IT Security Engineer

About the role

The IT Security Engineer is responsible for analyzing and correlating information collected from a variety of sources to identify, investigate, and report vulnerabilities in the SHC environment. Additionally, they assist with resolving security incidents and coordinating with infrastructure and applications teams.

Responsibilities

• Coverage of network traffic and host data to identify anomalous activity and potential threats to SHC resources.
• Establishing alerting thresholds and triggers, analyzing alerts from various sources, and determining possible causes and effects on SHC systems and data.
• Validating IDS alerts against network traffic and host data sources to root out false positives.
• Conducting regular and ad-hoc vulnerability and malware scans to identify unauthorized access to SHC data systems and malicious code activity.
• Providing engineering support for security incidents and threats in the SHC environment, including initial incident triage, response, and resolution.
• Performing forensic analysis on known security vulnerabilities and recommending risk mitigation procedures.
• Carrying out trend analysis and reporting on security incidents, identifying technical and procedural findings, and recommending remediation strategies or technical solutions.
• Participating in IT security audits as required.

Requirements

• Bachelor’s degree in Engineering, Computer Science, or a related field from an accredited college or university.
• Three (3) years of progressively responsible and directly related work experience.
• Strong knowledge and experience with tools, platforms, and protocols such as TCP/IP, DHCP, DNS, and directory services.
• Experience with network security defense technologies like IDS, IPS, endpoint protection, DLP, NAC, proxy, and WAF.
• Knowledge of Unix, Linux, Apple, and Windows operating systems.
• Understanding of SCCM/SCOM and mobile platforms.
• Strong knowledge of network security architecture concepts including topology, protocols, components, and principles.
• Ability to identify systemic security issues based on analysis of vulnerability and configuration data.

Qualifications

• CISSP certification or equivalent.
• CISM certification or GIAC equivalent.

Skills

• Proficiency in tools and platforms relevant to network security.
• Ability to analyze and interpret complex data to identify security risks.
• Effective communication and problem-solving skills.
• Strong attention to detail and ability to manage multiple tasks simultaneously.

Benefits

Stanford Health Care offers a comprehensive benefits package that includes:

• Health insurance
• Retirement savings plans
• Flexible spending accounts
• Employee assistance programs
• Professional development opportunities

Pay

Base pay generally starts at $55.85 - $74.00 per hour, with final salary determined based on a variety of factors including internal equity, experience, education, specialty, and training.

Schedule

This is a full-time day position located in the United States of America.