CYBERSECURITY ENGNR

Covenant Health•Knoxville, TN

73d

About The Position

The Cybersecurity Engineer is responsible for the technical implementation and management of cybersecurity measures within Covenant Health. This role involves extensive hands-on work with security technologies, developing and maintaining security protocols, and ensuring the protection of sensitive data. The Cybersecurity Engineer collaborates within the various IT teams of Covenant Health to integrate security solutions into business projects and solutions, while supporting overall compliance with HIPAA regulations.

Requirements

Bachelor's Degree in Computer Science, Information Technology, Cybersecurity, or a related field is required.
Ten (10 years of experience in IT/Technology, with a minimum of 5 years proven experience in cybersecurity (with a proven track record in designing, engineering, and implementing security solutions within an enterprise environment).
Industry certifications, such as CISSP, CISM, CISA, CCSP, CEH, Microsoft Azure Engineer, or the equivalent are required.

Responsibilities

Design, implement, and manage advanced security solutions, including firewalls, intrusion detection systems, encryption, and vulnerability management tools.
Implement and manage security measures for network infrastructure, including routers, switches, and wireless access points.
Configure and manage security settings for Active Directory (AD) and Azure AD environments.
Deploy and manage endpoint protection solutions and security information and event management (SIEM) systems.
Implement and manage M365 security features, including conditional access policies, data loss prevention (DLP), and advanced threat protection (ATP).
Research, prototype, and recommend new security tools, processes, or capabilities that will enhance Covenant's controls.
Monitor, detect, and respond to security incidents, ensuring timely resolution and documentation.
Conduct regular risk assessments and vulnerability scans to identify and mitigate potential threats.
Lead the technical response to security breaches, coordinating with the incident response team to resolve
Manage and monitor identity and access management (IAM) systems to ensure secure access to resources.
Perform vulnerability scanning and threat detection to identify areas to improve.
Perform digital forensics and incident response when necessary.
Ensure compliance with HIPAA and other relevant regulations and standards.
Develop and implement technical security controls to protect sensitive data and support organizational goals.
Work closely with other IT teams to ensure security measures are integrated into systems and applications.
Provide training and support to staff on cybersecurity best practices and emerging threats.
Maintain detailed documentation of security protocols, configurations, and incident reports.
Stay current with the latest cybersecurity trends and technologies, recommending improvements to existing security measures.
Conduct both routine and irregular security audits to ensure compliance with security policies and standards.
Draft and update security standards and policies to ensure they meet the latest industry's best practices and regulatory requirements.
Configure, troubleshoot, and maintain security infrastructure software and hardware.
Install and manage software that monitors systems and networks for security breaches and intrusions.
Assist with the planning, development, implementation, and updating of the organization's information security strategy
Follows policies, procedures, and safety standards.
Completes required education assignments annually.
Works toward achieving goals and objectives, and participates in quality improvement initiatives as requested.
Performs other duties as assigned.