SR INFO SECURITY ENGINEER

Temple University Health System•Philadelphia, PA

14h•Hybrid

About The Position

Assesses risk to the Health System's information security architecture through the engineering/installation/management of the Vulnerability Assessment System. Participates in the engineering/implementation of network security architecture to support Hyper Converged Infrastructure computing. Supports/maintains a broad suite of information security infrastructure. Accountable for security/networking infrastructure component availability/integrity. Assesses the Health System's vulnerability to Cybersecurity attacks. Responsible for the inventory of all network devices. Performs forensic investigations requested by HR/Legal/Compliance or the CISO. Participates in planning, engineering, installation, and maintenance of IT security systems. Works with IT staff/business units to assess risks/address security issues. Defines security requirements and reviews systems to determine if they are designed to comply with established standards. Develops strategies to respond to/recover from a security breach. In the event of a breach, leads incident response activities to minimize the impact; leads a technical/forensic investigation into how the breach occurred/extent of damage. Reports findings to CISO. Certified Information Systems Security Professional (CISSP) certification required within 1 year from date of hire. This role requires three days on-site (Tuesday, Wednesday and Thursday) at Temple Health Women's and Families Hospital.

Requirements

Bachelor's Degree in Computer, Information Sciences or Business Administration or Combination of relevant education and experience may be considered in lieu of degree
5 years experience in a system administration role supporting multiple platforms and applications.
7 years experience with anti-virus software, intrusion detection, firewalls, and content filtering
7 years experience with planning, researching and developing security policies, standards and procedures
7 years experience with risk assessment tools, technologies, and methods
General Experience with communicating network security issues to peers and management
Certified Information Systems Security Professional (CISSP) certification required within 1 year from date of hire.

Nice To Haves

GIAC Cert Incident Handler
GIAC Penetration Tester
GIAC Cert Forensic Examiner

Responsibilities

Assess risk to the Health System's information security architecture through the engineering/installation/management of the Vulnerability Assessment System.
Participate in the engineering/implementation of network security architecture to support Hyper Converged Infrastructure computing.
Support/maintain a broad suite of information security infrastructure.
Ensure security/networking infrastructure component availability/integrity.
Assess the Health System's vulnerability to Cybersecurity attacks.
Maintain inventory of all network devices.
Perform forensic investigations requested by HR/Legal/Compliance or the CISO.
Participate in planning, engineering, installation, and maintenance of IT security systems.
Work with IT staff/business units to assess risks/address security issues.
Define security requirements and review systems to determine if they are designed to comply with established standards.
Develop strategies to respond to/recover from a security breach.
Lead incident response activities to minimize the impact of a security breach.
Lead technical/forensic investigations into how a breach occurred and the extent of damage.
Report findings to CISO.