Information Security Engineer II

Rothman Orthopaedics•Philadelphia, PA

1d•Onsite

About The Position

The Information Security Engineer II role assists in developing, implementing and maintaining corporate information security standards, technologies, processes and procedures. The Information Security Engineer coordinates, administers, monitors and maintains security infrastructure. This includes but is not limited to network security systems, endpoints, identity and access management (IAM) solutions, security information and event monitoring (SIEM) system logging and analysis, application security, threat intelligence, forensics, anti-malware and vulnerability assessment programs.

Requirements

High School Diploma or equivalent required
10 years of experience preferred
IT Security and industry certifications required
Technical abilities of an engineer plus security minded component required

Responsibilities

Rigorously maintain security systems and administer security configurations that reduce risk to enterprise systems.
Maintain vulnerability management standards across all operating systems, software applications and hardware configurations.
Administer and maintain security systems, including firewalls, network and host intrusion prevention/detection systems (IPS/IDS), virtual private networks (VPNs), SIEM systems, threat intelligence platforms, endpoint protection, email security, forensic tools, public/private/hybrid cloud infrastructure and IAM systems.
Improve efficiencies using automation and orchestration solutions to reduce manual work that can be done programmatically.
Serve as a team lead and point of contact for 3rd party incident response analysts, security operations center (SOC) analysts, application engineers and security management.
Perform research and provide insight when requested with regard to tactical and strategic decisions.
Create and maintain security documentation and configuration practices as directed.
Protect systems by defining access privileges, control structures and resources.
Attend and engage in all change and project management meetings as requested.
Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws.
Administer best practices and required configuration standards for compliance and privacy law obligations.
Remain current with new security threats and assessing systems to ensure they can defend the business.
Provide rigorous administrator and configuration settings for third parties.
Act as a point of contact for disaster recovery and business continuity.
Perform other duties as assigned.