Information Security Engineer II

Arkansas Children's Hospital Northwest•Little Rock, AR

11d•Remote

About The Position

This is a full-time, day shift position working Monday to Friday. The role is remote but requires the employee to reside in Arkansas. The Information Security Engineer II analyzes and resolves security issues, concerns, questions, incidents, and events. They evaluate and identify risks and threats, addressing unexpected problems. The position provides security monitoring, vulnerability assessment, and analysis into potential security-related events and incidents. It ensures appropriate access to systems for authorized associates while protecting against unauthorized access and operates IT security systems. The role also involves evaluating new information security threats and their potential threat to the company.

Requirements

High school diploma or GED or equivalent
2 years of relevant experience
Must reside in Arkansas or be willing to relocate to Arkansas
Palo Alto firewalls
Microsoft Purview (data protection, compliance, and governance)
Microsoft 365 security (Defender for Office 365)
Cloud security (Defender for Cloud)

Nice To Haves

Bachelor's degree in a related field of study
4 years of experience in lieu of a diploma/GED

Responsibilities

Monitors and advises on information security issues related to the systems and workflow.
Monitors security logs and related security events through a SIEM tool.
Performs vulnerability scans and penetration tests; assists in developing and maintaining scripts, routines and software to perform vulnerability threat assessments.
Participates as a member of the security incident response team; evaluates security incidents, assist in developing solutions. Assists in a computer crime or incident scene.
Monitors security controls effectiveness (e.g. user add/remove, systems patching, firewall changes) and the company’s security subsystems.
Participates IT security projects.
Reviews vulnerabilities and assist in making recommendations to IT management.
Assists in evaluating security aspects of systems changes (e.g. wireless, mobile, cloud solutions,).
Maintains user security awareness training.
Performs other duties as assigned.