Senior IT Security Engineer

AltaMed•La Junta Gardens, CO

4d•$110,540 - $138,174

About The Position

The Senior IT Security Engineer is responsible for identifying, evaluating, and implementing technical security controls to prevent, detect, contain, and respond to information security threats, which includes supporting the technology efforts of AltaMed. This person is required to analyze threats using a variety of security technologies, including email filtering, anti-malware, access control, phishing detection, Cloud Access Security Broker (CASB)/web filtering, firewalls, intrusion detection/prevention, data loss prevention, and data encryption. Reviews and guides security configuration of a variety of applications and endpoint systems, including servers, desktops, network devices, and Internet of Things (IOT)/Operational Technology (OT) devices. Required to lead projects and project teams within and outside the security department. Must maintain an in-depth understanding of current and emerging security threats, recommending technical and process improvements to protect against such threats. This individual also assists in the development and maintenance of information security strategy and will be required to provide support across other technology and business units, ensuring the implementation and operation of the appropriate security controls across the organization are aligned with Information Security policies and standards.

Requirements

Bachelor’s Degree in Computer Science, Health / Business Administration, or Information Technology, and 4 years of progressive experience in information security as an engineer, architect, or analyst.
Instead of a college degree, 6 years of progressive experience in information security as an engineer, architect, or analyst.
Knowledge and understanding of relevant legal and regulatory requirements (i.e., HIPAA, PCI, Privacy, etc.) are required.
Must hold an active Certified Information Systems Security Professional (CISSP) certification.

Responsibilities

Identifying, evaluating, and implementing technical security controls to prevent, detect, contain, and respond to information security threats.
Analyzing threats using a variety of security technologies, including email filtering, anti-malware, access control, phishing detection, Cloud Access Security Broker (CASB)/web filtering, firewalls, intrusion detection/prevention, data loss prevention, and data encryption.
Reviewing and guiding security configuration of a variety of applications and endpoint systems, including servers, desktops, network devices, and Internet of Things (IOT)/Operational Technology (OT) devices.
Leading projects and project teams within and outside the security department.
Maintaining an in-depth understanding of current and emerging security threats, recommending technical and process improvements to protect against such threats.
Assisting in the development and maintenance of information security strategy.
Providing support across other technology and business units, ensuring the implementation and operation of the appropriate security controls across the organization are aligned with Information Security policies and standards.