Information Security Engineer

Best Care•Omaha, NE

18h•Onsite

About The Position

The Information Security Engineer monitors the environment and responds to information security events while supporting the development and maintenance of enterprise information security protocols. The role researches emerging threats and technologies, reviews security policies, evaluates and deploys security solutions, tracks exceptions, reports on security risks, and collaborates on technology projects to ensure security is addressed throughout their life cycle. The position assists with security technology evaluation and deployment, access management, and system acquisition and implementation. It helps maintain compliance with security frameworks and applicable laws, assesses the IT security environment for weaknesses and risks, provides technical expertise, and recommends options that balance business needs with security concerns. The role also supports security training and follows procedures for responding to and reporting security incidents. The engineer responds to incidents with urgency, documents resolutions, analyzes recurring issues, provides on-call coverage, and supports IT personnel with security troubleshooting. Responsibilities also include updating system documentation, defining support and maintenance procedures, and mentoring and training teammates. The position is based at the Methodist Corporate Office, 825 S 169th St., Omaha, Nebraska. The schedule is Monday through Friday, 8:00 a.m. to 5:00 p.m., with on-call responsibilities and some evenings and weekends as needed. Physical demands are classified as light work, exerting up to 20 pounds of force. Keyboarding, reaching, repetitive motions, and sitting are frequently performed; hearing and seeing/visual activities are constant. The role is not exposed to the listed job hazards.

Requirements

Associate’s degree in Computer Science, Business Information Systems, Information Technology, Information Security, or a related field; relevant equivalent work experience may substitute for the degree.
At least 3 years of IT experience, such as Security Operations Center, Network Operations Center, system administration, or helpdesk support.
CompTIA Security+ or Certified Information Systems Security Professional (CISSP) certification required within 1 year of hire.
Skills in organizing and managing workload, troubleshooting technical issues, and providing customer service to all organizational levels.
Fundamental knowledge of information security technologies and best practices.
Knowledge of network, software, and hardware configuration, maintenance, and performance tuning; LAN/WAN and wireless technology; network protocols and operating systems; Office 365 Suite; endpoint security solutions; Identity and Access Management systems; Asset Management systems and processes; enterprise CCTV and physical access control systems; firewalls; and multi-factor authentication.
Ability to capture and analyze log files, communicate effectively verbally and in writing, work in a changing environment and without direct supervision, work a call schedule, and automate manual functions.
Ability to exert up to 20 pounds of force; frequent keyboarding, reaching, repetitive motions, and sitting; constant hearing and seeing/visual activity.

Nice To Haves

Bachelor’s degree.
Active Directory experience.
Windows Desktop and Server administration experience.
Experience with enterprise-wide security architecture and/or security procedures.

Responsibilities

Research information security threats, industry trends, emerging technologies, and response alternatives.
Review security policies, procedures, and guidelines as requested.
Research, assess, and deploy security technology solutions, including encryption, firewalls, authorization, authentication, intrusion detection, and gateway security controls.
Approve, track, and report security exceptions; prepare security status reports and monitor vendor security controls and technology performance.
Collaborate on technology projects to address security throughout the project life cycle and provide information supporting security improvement recommendations and tool acquisition.
Assist in evaluating and deploying security technologies and tools.
Understand processes and ensure appropriate access levels throughout information and identity lifecycles.
Participate in planning, selection, implementation, deployment, or acquisition of systems and technology, assessing security requirements and controls.
Help maintain compliance with security control frameworks such as HIPAA and PCI and other applicable laws and regulations.
Assess the IT security environment for weaknesses, evaluate threats and risks, and help manage those risks.
Serve as a technical subject matter expert for assigned systems and provide technical direction on security projects.
Balance business needs against security concerns and articulate issues and recommendations.
Participate in designing, developing, and delivering security training programs.
Follow playbooks and procedures for responding to and reporting security incidents.
Respond to incidents urgently, escalate situations outside the employee’s control, document incidents and tasks accurately, and analyze recurring incidents for possible improvements.
Provide on-call availability and communicate with appropriate individuals before reassigning incidents or tasks.
Troubleshoot and resolve security incidents as a technical resource for administrators and other IT personnel.
Update system documentation, define and implement support and maintenance procedures, and contribute to knowledge base and SharePoint documentation.
Mentor and train teammates, share responsibilities and knowledge, and support team coverage.