Principal Security Engineer

About the role

The Principal Security Engineer will be responsible for designing and implementing robust security solutions. This role involves performing security reviews, identifying gaps in security architecture, and developing a security risk management plan. The engineer will define and document how new systems or interfaces impact the security posture of the current environment and will plan, design, test, and enhance operational security and resiliency.

Responsibilities

• Design and implement security solutions to protect data and systems.
• Perform security reviews and identify gaps in security architecture.
• Develop and maintain a security risk management plan.
• Define and document the security impact of new systems and interfaces.
• Evaluate security architectures and designs to determine the adequacy of security controls.
• Plan, design, test, and enhance the operational security and resiliency of computers, VoIP, network infrastructure, backups, and network-connected medical devices.

Requirements

• Education: A Bachelor's Degree in Computer Science, Information Security, or a related field is required. A combination of relevant education and experience may be considered in lieu of a degree.
• Experience: 10 years of experience in Information Security and 10 years of experience in systems administration, architecting, developing, and designing complex systems and networking are required. Experience with cloud security principles and practices (e.g., AWS, Azure, GCP) and securing virtualized environments is also required.
• Technical Skills: A demonstrated understanding of cybersecurity principles, best practices, and industry standards such as ISO 27001, NIST, and CIS Controls is required. This includes an understanding of encryption methodologies, network architecture, protocols, and security technologies (firewalls, IDS/IPS, VPN, SIEM, endpoint protection), and proficiency in security frameworks like MITRE ATT&CK and the Cyber Kill Chain.

Preferred Qualifications

• A Master's Degree in Computer Science, Management, or a related field.
• CISSP - Cert Info Sys Security Prof or GSE - GIAC Security Essentials certification.
• Background in a healthcare environment.
• Experience with Bio-Med / IoT, or SCADA systems preferred.
• Strong documentation skills.

Benefits

Everforth Apex offers a range of supplemental benefits, including medical, dental, vision, life, disability, and other insurance plans that offer an optional layer of financial protection. We offer an ESPP (employee stock purchase program) and a 401K program which allows you to contribute typically within 30 days of starting, with a company match after 12 months of tenure. Everforth Apex also offers a HSA (Health Savings Account on the HDHP plan), a SupportLinc Employee Assistance Program (EAP) with up to 8 free counseling sessions, a corporate discount savings program and other discounts. In terms of professional development, Everforth Apex hosts an on-demand training program, provides access to certification prep and a library of technical and leadership courses/books/seminars once you have 6+ months of tenure, and certification discounts and other perks to associations that include CompTIA and IIBA. Everforth Apex has a dedicated customer service team for our Consultants that can address questions around benefits and other resources, as well as a certified Career Coach. You can access a full list of our benefits, programs, support teams and resources within our ‘Welcome Packet’ as well, which an Everforth Apex team member can provide.