Security Engineer, Information Systems, Full Time, Day

Valley Health System•Blacksburg, VA

27d•$115,107 - $143,874•Onsite

About The Position

Under the direction of Information Systems Management, the Security Analyst ensures that the Valley Health Systems computers and networks are secured. The Security Analyst is responsible for information security policy maintenance, policy education, security training, security awareness activities, monitoring policy compliance, monitoring compliance, and conducts investigations of security incidents. Working with the Information Systems team, the Security Analyst will monitor, assess, and fine-tune the health systems business continuity and disaster recovery program; as well as perform network penetration tests, application vulnerability assessment scans, and risk assessments. The Security Analyst is responsible for the research, procurement, monitoring, and maintenance, of all the security tools used by the Information Systems staff including: Firewalls, DLP, IDS/IPS, NAC, web proxy filters, vulnerability scanners, malware scanners, and others.

Requirements

Security Certification in: CompTIA Security+, Certified Information Systems Security Professional (CISSP), Systems Security Certified Practitioner (SSCP), Information Security Fundamentals (GIAC)
Strong knowledge of HIPAA, HITECH, & PC

Responsibilities

Participate in the planning and design of enterprise security architecture, under the direction of Information Systems Management.
Participate in the creation of enterprise security documents (policies, standards, baselines, guidelines and procedures) under the direction of Information Systems Management.
Participate in the planning and design of an enterprise Business Continuity Plan and Disaster Recovery Plan, under the direction of Information Systems Management.
Maintain up-to-date detailed knowledge of the information technology security industry including awareness of new or revised security solutions, improved security processes and the development of new attacks and threat vectors.
Recommend additional security solutions or enhancements to existing security solutions to improve overall enterprise security.
Perform the deployment, integration, and configuration of all security solutions and of any enhancements to existing security solutions in accordance with standard best operating procedures and the enterprise's security policies and procedures.
Maintain up-to-date baselines for the secure configuration and operations of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.).
Monitor all in-place security solutions for efficient and appropriate operations.
Work closely with SOC to ensure overall solution is in line with the VHS security approach.
Review logs and reports of all in-place devices, whether they be under direct control (i.e., security tools) or not (i.e., workstations, servers, network devices, etc.). Interpret the implications of that activity and devise plans for appropriate resolution.
Participate in investigations into problematic activity.
Participate in the design and execution of vulnerability assessments, penetration tests, and security audits.
Provides on-call coverage on a scheduled basis, in emergency situations, and when requested by the department management.
Performs other duties as assigned.

Benefits

Medical/Prescription, Dental & Vision Discount Program (Full Time/Part Time Employees)
Group Term Life Insurance and AD&D(Full Time Employees)
Flexible Spending Accounts and Commuter Benefit Plans
Supplemental Voluntary Benefits ( e.g. Short-term and Long-term Disability, Whole Life Insurance, Legal Support, etc.)
6 Paid Holidays, Paid Time Off (varies), Wellness Time Off, Extended Illness
Retirement Plan
Tuition Assistance
Employee Assistance Program (EAP)
Valley Health LifeStyles Fitness Center Membership Discount
Day Care Discounts for Various Daycare Facilities