Senior Information Security Engineer – Endpoint Engineer

The University of Chicago Medicine • Darien, IL

1d • Remote

About The Position

Join a world-class academic healthcare system, UChicago Medicine, as a Senior Information Security Engineer in our Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area. This role will be that of a Senior Information Security Engineer. This person will lead our effort in enhancing and maturing our defensible architecture across our network and Cloud solutions. Besides the network related tasks, this role will also assist Incident Response as needed and will require solid written skills to document improvement to processes and procedures. This role will also be primarily responsible for the creation of Standard Operating Procedures for our SOC operations related to all Network Security solutions implemented by you. Under general direction of Information Security leadership, implement and operate security controls to minimize risk to physical and logical assets of the University of Chicago Medical Center and to ensure the confidentiality and integrity of UCMC sensitive information. The Information Security Engineer will assist with the core security activities of UCMC and lead many enhancement projects. This includes but is not limited to design and implementation of enterprise network security systems, security operations, threat analysis, log and event management, and network monitoring.

Requirements

• BS or BA degree in Computer Science or other IT related field, or combination of education and work experience
• 8 years of Information Security experience required, preferably at least 3 years in a Senior or Lead Engineering role
• 5 years’ experience maintaining and designing Defense-in-Depth strategies for complex network architectures
• Proficiency in deploying, configuring, and troubleshooting EDR and AV solutions
• Effective written and verbal communication skills
• Good working knowledge of the Plan, Build, Run model within an IT environment
• Expert understanding of TCP/IP (OSI Layers 1– 4) and Internet and Intranet technologies required (OSI Layers 5-7)
• Good knowledge of Windows and Linux Operating Systems

Nice To Haves

• Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed
• Good knowledge of vulnerability management, risk analysis, and forensics preferred
• Experience with HIPAA, NIST, FERPA, and SOX preferred

Responsibilities

• Primary subject matter expert for all Endpoint Security related functions.
• Deploy, configure, and manage Endpoint Detection and Response (EDR) solutions (e.g., CrowdStrike, Microsoft Defender ATP, SentinelOne).
• Design and maintain endpoint security architectures (Windows, Mac, Linux).
• Assist other security engineering and consulting needs as they arise.
• Develop project plans and manage project teams for security related projects.
• Provide communications, including status reporting, risk management, escalation of issues, and in general, making sure the project is delivered on budget, on schedule, and within scope.
• Other duties as assigned.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Number of Employees: 5,001-10,000 employees