IT Security Engineer

Foundation Health, LLC•Fairbanks, AK

4h•$33 - $53

About The Position

This position is accountable for the engineering and maintenance of a secure enterprise network and system environment. Conducts software and systems engineering, and software systems research. Provides hands-on support for a broad spectrum of technologies, including network devices and virtual machines. Develops new capabilities, and ensures cybersecurity is fully integrated. The incumbent will conduct comprehensive technology research to mitigate potential vulnerabilities in information systems, as well as, design, develop, test, and evaluate information system security throughout the systems development life cycle.Duties also include ensuring the confidentiality, integrity and access of electronic protected health information and monitoring program compliance, as well as investigation and tracking of incidents and breaches in compliance with state and federal laws. The incumbent is competent to work at the highest practical understanding of most phases of information security analysis and design as it applies to current and future system requirements. Pay & Benefits: Compensation: $33.12 to $53.00 hourly wage based on experience and education Additional Pay: Shift Differential, Annual Increases, Paid Time Off Benefits: medical, vision, dental, 401k with employer match Education Benefits: FHP Tuition Assistance, Student Loan Forgiveness Other Benefits: Onsite Gym, Wellness Programs, Discount programs Shifts Available: Full Time, Exempt, M-F About Fairbanks Memorial Hospital Fairbanks Memorial Hospital is a non-profit facility owned by the Greater Fairbanks Community Hospital Foundation. A Joint Commission-accredited facility with 152 licensed beds, Fairbanks Memorial Hospital is the primary referral center for residents of Alaska's interior with a strong patient-to-nurse ratio and Shared Leadership Infrastructure. In addition to our exceptional clinical environment, our location offers incomparable lifestyle rewards away from work. In Fairbanks, small-town living, spectacular natural beauty and endless recreation combine to create a one-of-a-kind place to live, work and play.

Requirements

Must possess strong knowledge of business, information security and/or computer science as normally obtained through the completion of a bachelor's degree.
Must possess at least 6 years of experience in Information Security in a healthcare or related environment, or an equivalent combination of relevant education, technical, business and/or healthcare industry experience.
Must possess experience with optimizing security system capabilities (including resilience and dependability capabilities), under changing conditions and changing operations.
Must have experience with evaluating and assessing information security system designs, and hardware and software solutions integration and design.
Certification in one of the following areas is required within one year of entering the position: Cisco CCNP Security, EC-Council Certified Network Defender(CND), GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), GIAC Continuous Monitoring Certification (GMON), GIAC Certified Enterprise Defender (GCED), GIAC Certified Windows Security Administrator (GCWN), GIAC Certified Perimeter Protection Analyst (GPPA), GIAC Certified UNIX Security Administrator (GCUX), GIAC Certified Detection Analyst (GCDA), Microsoft Certified Solutions Expert (MCSE), or other relevant industry certification.
Requires independent judgment, critical decision making, excellent analytical skills, with excellent verbal and written communications.
Ability to think quickly under difficult or complex conditions and clearly communicate to appropriate staff; ability to balance project workloads with customer support and on-call demands.
Must demonstrate expert knowledge of information technology and information security principles and practices.
Must have experience in project planning and reporting either individually or in a team.
Requires communication and presentation skills to engage technical and non-technical audiences.
Requires ability to communicate, and interact across facilities and at various levels.
Incumbent will have skills to mentor less experienced team members.
As is typical in this industry, variable shifts and hours, and on-call duties may be required.

Nice To Haves

Additional related education and/or experience preferred.

Responsibilities

Conducts independent comprehensive assessments of the management, operational, and technical security controls and control enhancements employed within or inherited by an information technology (IT) system to determine the overall effectiveness of the controls (as defined in NIST SP 800-37).
Installs, configures, troubleshoots, and maintains server configurations (hardware and software) to ensure their confidentiality, integrity, and availability.
Manages accounts, firewalls, and patches. Responsible for access control, passwords, and account creation and administration.
Analyzes the security of new or existing computer applications, software, or specialized utility programs and provides actionable results.
Responds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats. Acts as the third level of incident support. And as an experienced Incident Response Team Member of the Incident Response (IR) Specialty, analyzes and makes informed decisions based on currently available incident information. Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security. Investigates and analyzes all relevant response activities.
Develops and maintains business, systems, and information processes to support enterprise mission needs; develops information technology (IT) rules and requirements that describe baseline and target architectures. Performs assessments of systems and networks within the network environment or enclave and identifies where those systems/networks deviate from acceptable configurations, enclave policy, or local policy. Measures effectiveness of defense-in-depth architecture against known vulnerabilities.
Develops system concepts and works on the capabilities phases of the systems development life cycle; translates technology and environmental conditions (e.g., law and regulation) into system and security designs and processes. Ensures that the stakeholder security requirements necessary to protect the organization's mission and business processes, are adequately addressed in all aspects of enterprise architecture. This includes reference models, segment and solution architectures, and the resulting systems supporting those missions and business processes.
Oversees, evaluates, and supports the documentation, validation, assessment, and authorization processes necessary to assure that existing and new information technology (IT) systems meet the organization's cybersecurity and risk requirements. Ensures appropriate treatment of risk, compliance, and assurance from internal and external perspectives. Advocates for changes in policy that support organizational cyberspace initiatives or required changes/enhancements.
Consults with customers to evaluate functional requirements and translate functional requirements into technical solutions.
Performs all functions according to established policies, procedures, regulatory and accreditation requirements, as well as applicable professional standards. Provides all customers of Foundation Health with an excellent service experience by consistently demonstrating our core and leader behaviors each and every day.