Cybersecurity Engineer- ZScaler

Envision Healthcare•Nashville, TN

About The Position

The Engineer Cyber Security role is to provide support of the Cyber Security Framework. This includes continued enhancement of the security program in the areas of security monitoring, vulnerability management, protection and detection technologies and threat intelligence. The Engineer Cyber Security is expected to be able to adapt and work in a rapidly changing environment and be able to relate security practices with business objectives. This position requires tactical techniques, communication and collaboration to garner support and employee action.

Requirements

Assists in development of strategy, defining departmental goals, and objectives for the cyber security program.
Validates security program maturity. (Repeatable processes, metrics etc.)
Respond and investigate complex cybersecurity events and incidents.
Analyzes log information to correlate security events.
Detect, analyze, track, and guide the remediation of complex security vulnerabilities.
Research emerging threats and implement or lead the implementation of preventive controls.
Support, maintain and enhance protection and detection security technologies.
Develop and execute security technologies improvement plans.
Provide guidance to business owners on the implementation of security controls for organizational programs.
Provides oversight in the creation and delivery of security metrics and provides technical analysis that gives insight into performance and trends.
Investigates and recommends new technologies in support of security operations.
Acts as subject matter expert for analysts within the team, assisting with all escalated issues.
Creates internal security department documentation.
Available for on-call as needed.
Bachelor's Degree from four-year College or University required.
4 years of work related experience required.
Strong knowledge of HIPAA, NIST and MITRE ATT&CK frameworks.
Experience managing, supporting, and implementing protection and detection technologies such as endpoint protection, email/web/network firewall, vulnerability scanning and SIEM platforms.
CISSP, CISM, CEH or similar for at least 3 years, required.

Responsibilities

Assists in development of strategy, defining departmental goals, and objectives for the cyber security program.
Validates security program maturity. (Repeatable processes, metrics etc.)
Respond and investigate complex cybersecurity events and incidents.
Analyzes log information to correlate security events.
Detect, analyze, track, and guide the remediation of complex security vulnerabilities.
Research emerging threats and implement or lead the implementation of preventive controls.
Support, maintain and enhance protection and detection security technologies.
Develop and execute security technologies improvement plans.
Provide guidance to business owners on the implementation of security controls for organizational programs.
Provides oversight in the creation and delivery of security metrics and provides technical analysis that gives insight into performance and trends.
Investigates and recommends new technologies in support of security operations.
Acts as subject matter expert for analysts within the team, assisting with all escalated issues.
Creates internal security department documentation.