Security Engineer

Corewell Health • Grand Rapids, MI

1d • Onsite

About The Position

Under minimal supervision assists and supports enterprise information security strategies, technical architectures, and solutions. Participates in the continual improvement of security management tools, controls, policies, procedures, and operations. Implements, analyzes, investigates, and enforces audit of security policies, and procedures that safeguard the integrity of and access to enterprise systems, files and data elements. Considers new technologies, architectures and security products that will support security requirements for the enterprise and its customers, business partners and vendors. Provides direct operational support of the business and Digital Services (DS) staff for security related matters. Represents the security needs of the organization by providing expertise and consulting assistance for all DS projects and managed systems. Participates and documents security matters in product selection, procedure development, application development, database design, network and/or platform (operating system) efforts. Documents and analyzes security assessments and reviews of internally and externally hosted application and infrastructure systems to ensure security compliance. Consults on security risk analysis scenarios and response procedures, based upon emerging security threats, as needed. Competent to work with security engineering within a diverse technology portfolio, but at times requires guidance from others. Essential Functions Under minimal supervision assists in the development, implementation and maintenance of current and future enterprise information security strategies, technical architectures, and solutions, in support of the Corewell Health organization, its customers, business partners and vendors. Provides direct operational support of the business and IS staff for security-related matters and represents the security needs of the organization by providing expertise and consulting assistance for all DS projects and managed systems. Implements, analyzes, investigates, and enforces the audit of security policies, and procedures that safeguard the integrity of and access to enterprise systems, files and data elements, including system security profiles, security incidents\violations and exceptions. Correlates and analyzes threats collected from the various security tools. Performs, analyzes and documents security assessments and reviews of internally and externally hosted application and infrastructure systems to ensure security compliance. Consults on security risk analysis scenarios and response procedures, based upon emerging security threats, as needed, and recognizes and identifies potential areas where new data security policies and procedures are required and/or existing guidelines need change. Conducts industry research of current attack trends and techniques, and learns about new technologies, architectures and security products that will support security requirements, and contributes to the continual evolution of enterprise security management tools, controls, operations, policies, and procedures. Participates in security product selection, procedure development, application development, database design, network and/or platform (operating system) efforts. Shares knowledge by coaching less seasoned staff.

Requirements

• Associate's Degree/Technical school or equivalent
• At least 2 years of relevant experience in the field

Nice To Haves

• Bachelor's Degree or equivalent
• 3 or more years of relevant experience in the field
• Experience in three or more of the following: Network topology/ infrastructure Client/server, databases, web security, multiple operating systems (Windows, nix, mainframe, IOS/mobile, embedded), web operations
• Experience in security engineering and with security information management systems and common system log formats, including syslog and event log, as well as using vulnerability assessment systems to test enterprise networks and applications
• Experience participating in security incident response procedures
• Experience with security auditing and enforcement practices

Responsibilities

• Assists and supports enterprise information security strategies, technical architectures, and solutions.
• Participates in the continual improvement of security management tools, controls, policies, procedures, and operations.
• Implements, analyzes, investigates, and enforces audit of security policies, and procedures that safeguard the integrity of and access to enterprise systems, files and data elements.
• Considers new technologies, architectures and security products that will support security requirements for the enterprise and its customers, business partners and vendors.
• Provides direct operational support of the business and Digital Services (DS) staff for security related matters.
• Represents the security needs of the organization by providing expertise and consulting assistance for all DS projects and managed systems.
• Participates and documents security matters in product selection, procedure development, application development, database design, network and/or platform (operating system) efforts.
• Documents and analyzes security assessments and reviews of internally and externally hosted application and infrastructure systems to ensure security compliance.
• Consults on security risk analysis scenarios and response procedures, based upon emerging security threats, as needed.
• Assists in the development, implementation and maintenance of current and future enterprise information security strategies, technical architectures, and solutions, in support of the Corewell Health organization, its customers, business partners and vendors.
• Implements, analyzes, investigates, and enforces the audit of security policies, and procedures that safeguard the integrity of and access to enterprise systems, files and data elements, including system security profiles, security incidents\violations and exceptions.
• Correlates and analyzes threats collected from the various security tools.
• Performs, analyzes and documents security assessments and reviews of internally and externally hosted application and infrastructure systems to ensure security compliance.
• Consults on security risk analysis scenarios and response procedures, based upon emerging security threats, as needed, and recognizes and identifies potential areas where new data security policies and procedures are required and/or existing guidelines need change.
• Conducts industry research of current attack trends and techniques, and learns about new technologies, architectures and security products that will support security requirements, and contributes to the continual evolution of enterprise security management tools, controls, operations, policies, and procedures.
• Shares knowledge by coaching less seasoned staff.

Benefits

• Comprehensive benefits package to meet your financial, health, and work/life balance goals.
• On-demand pay program powered by Payactiv
• Discounts directory with deals on the things that matter to you, like restaurants, phone plans, spas, and more!
• Optional identity theft protection, home and auto insurance, pet insurance
• Traditional and Roth retirement options with service contribution and match savings
• Eligibility for benefits is determined by employment type and status

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: Associate degree