Information Security Engineer

Nebraska Methodist Hospital•Omaha, NE

1d•Onsite

About The Position

The Information Security Engineer monitors the information security environment and responds to security events, while supporting the development and maintenance of enterprise security protocols. The role researches threats, trends, technologies, and response options; evaluates and deploys security tools; helps maintain compliance with applicable frameworks and regulations; and participates in security assessments, technology projects, incident response, and training. The engineer also documents system issues and fixes, develops support and maintenance procedures, and mentors teammates. The position is based at the Methodist Corporate Office in Omaha, Nebraska. The schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m., with on-call responsibilities and some evenings and weekends as needed. The role requires an associate degree in a relevant field or equivalent work experience, at least three years of IT experience, and CompTIA Security+ or CISSP certification within one year of hire. A bachelor's degree is preferred.

Requirements

Associate degree in Computer Science, Business Information Systems, Information Technology, Information Security, or a related field, or relevant equivalent work experience in place of a degree.
At least 3 years of IT experience, such as in a Security Operations Center, Network Operations Center, system administration, or helpdesk support.
CompTIA Security+ or Certified Information Systems Security Professional (CISSP) certification required within 1 year of hire.
Ability to organize and manage workload and troubleshoot technical issues.
Ability to provide customer service to all levels of the organization.
Fundamental knowledge of information security technologies and best practices.
Knowledge of network, software, and hardware configuration, maintenance, and performance tuning; LAN/WAN and wireless technology; network protocols; and operating systems and concepts.
Knowledge of Office 365, endpoint security solutions, Identity and Access Management systems, Asset Management systems and processes, enterprise CCTV systems, enterprise physical access control systems, firewall administration, and multi-factor authentication.
Ability to capture and analyze log files and automate manual functions.
Effective verbal and written communication skills; ability to work in a changing environment, work without direct supervision, and work an on-call schedule.
Ability to meet the position's light physical demands, including exerting up to 20 pounds of force.

Nice To Haves

Bachelor's degree.
Active Directory experience.
Windows Desktop and Server administration experience.
Experience with enterprise-wide security architecture and/or security procedures.

Responsibilities

Research and stay informed about information security threats, industry trends, emerging technologies, and response alternatives.
Review security policies, procedures, and guidelines; research and recommend security technology solutions, including encryption, firewalls, authentication, intrusion detection, and gateway security controls.
Process and report security exceptions, prepare security status reports, evaluate vendor security controls, and recommend solutions to security technology issues.
Collaborate on technology projects and provide data to support security recommendations and tool acquisition.
Assist in evaluating, selecting, deploying, and implementing security technologies and tools.
Ensure appropriate access levels across information and identity lifecycles and participate in planning and implementing new systems and technology solutions.
Assess security requirements and controls for system deployment and acquisition projects.
Help maintain compliance with security control frameworks and applicable laws and regulations, including HIPAA and PCI.
Assess the IT security environment, identify weaknesses, evaluate threats and risks, and recommend risk-management options that balance business needs with security concerns.
Serve as a technical subject matter expert for assigned systems, provide technical direction on security projects, and support security training development and delivery.
Follow playbooks and procedures to respond to and report security incidents; respond urgently, escalate issues outside the employee's control, and document incidents and tasks accurately.
Analyze recurring incidents and recommend improvements to reduce future occurrences; provide on-call availability and communicate before reassigning incidents or tasks.
Troubleshoot and resolve security incidents as a technical resource for administrators and other IT staff.
Update system documentation, define and implement support and maintenance procedures, and contribute knowledge-base and SharePoint documentation.
Mentor and train teammates, share responsibilities and knowledge, and support team coverage.