Engineer Cyber Security

Envision Healthcare•Nashville, TN

About The Position

The Engineer Cyber Security role is to provide support of the Cyber Security Framework. This includes continued enhancement of the security program in the areas of security monitoring, vulnerability management, protection and detection technologies and threat intelligence. The Engineer Cyber Security is expected to be able to adapt and work in a rapidly changing environment and be able to relate security practices with business objectives. This position requires tactical techniques, communication and collaboration to garner support and employee action. Envision is a leading national medical group focused on delivering high-quality care to patients when and where they need it most. You’ll find clinicians and clinical support professionals across the nation who are proud to call Envision home. We welcome teammates of every background and work in communities that reflect the racial, ethnic, gender, sexual orientation, and economic diversity of our country. At Envision, we offer benefits at the speed of your life. Our wide range of health and welfare benefits allow you to choose the right ones for you and your family. Best of all, qualifying employees are eligible to enroll from day one, so you can rest easy knowing you and your loved ones are protected. Envision offers a variety of health and welfare benefit options to help protect your health and promote your wellbeing. The benefits offered include but not limited to: Medical, Dental, Vision, Life, Disability, Healthcare FSA, Dependent Care FSA, Limited Healthcare FSA, FSAs for Transportation and Parking & HSAs. Envision offers paid time off, 9 observed holidays and paid family leave. You accrue Paid Time Off (PTO) each pay period and depending on your position and can earn a minimum of 20 days and up to 25 days per calendar year.

Requirements

Solid research and consulting skills, with experience leading meetings and giving presentations to customers
Excellent documentation skills and verbal communication skills
Ethical hacking mindset and critical thinking.
Continuous improvement mindset.
Excellent data collection and analytics skills.
Solid engineering skills, with experience on developing and implementing cyber security solutions.
Available for on-call as needed.
Bachelor's Degree from four-year College or University required.
4 years of work related experience required.
Strong knowledge of HIPAA, NIST and MITRE ATT&CK frameworks.
Experience managing, supporting, and implementing protection and detection technologies such as endpoint protection, email/web/network firewall, vulnerability scanning and SIEM platforms.
CISSP, CISM, CEH or similar for at least 3 years, required.

Responsibilities

Assists in development of strategy, defining departmental goals, and objectives for the cyber security program.
Validates security program maturity. (Repeatable processes, metrics etc.)
Respond and investigate complex cybersecurity events and incidents.
Analyzes log information to correlate security events.
Detect, analyze, track, and guide the remediation of complex security vulnerabilities.
Research emerging threats and implement or lead the implementation of preventive controls.
Support, maintain and enhance protection and detection security technologies.
Develop and execute security technologies improvement plans.
Provide guidance to business owners on the implementation of security controls for organizational programs.
Provides oversight in the creation and delivery of security metrics and provides technical analysis that gives insight into performance and trends.
Investigates and recommends new technologies in support of security operations.
Acts as subject matter expert for analysts within the team, assisting with all escalated issues.
Creates internal security department documentation.