Sr IS Security Systems Engineer

Ochsner Health•New Orleans, LA

About The Position

The Senior Security Engineer is a dynamic role requiring knowledge of technology, cybersecurity, data protection, and governance practices. The engineer partners with existing teams to build and operate security services using agile methodologies across operational areas including compute, cloud, software security, databases, and other secure system domains and processes. The position supports security infrastructure and systems, security incident response, security standards and controls, technology infrastructure operations, and Level III network server and infrastructure support. It also coordinates projects and promotes standards, policies, and procedures governing the use and management of technology systems.

Requirements

High school diploma or equivalent.
Required IT experience: 2 years with a master's degree, 4 years with a bachelor's degree, 6 years with an associate degree, or 8 years of IT experience.
Direct, hands-on experience or strong working knowledge managing security infrastructure such as firewalls, intrusion prevention systems, web application firewalls, endpoint protection, SIEM, and log management technology.
Full-stack knowledge of IT infrastructure.
Ability to interpret business, technology, and threat drivers and develop practical security roadmaps.
Ability to translate complex security-related matters into business terms colleagues can readily understand.
Computer skills and dexterity required for data entry and retrieval.
Experience with regulations and frameworks such as HIPAA, PCI, and NIST.
Effective verbal and written communication skills and ability to present information clearly and professionally.
Proficiency with Windows-style applications, software packages specific to the role, and keyboard use.
Strong interpersonal skills.
Proficiency working with databases, online solutions, and programming languages.
Analytical skills and logical thought processes to formulate solutions to problems.
Ability to work under stressful situations while maintaining objective and professional communication with users, IS staff, and vendors.
Ability to work with frequent interruptions and changes in priorities.
Ability to move through the hospital and off-campus sites.
Ability to travel out of town occasionally.
Flexible scheduling, including nights, weekends, and extended shifts.

Nice To Haves

Bachelor's degree in computer science, information systems, cybersecurity, or a related field.
MSCE, ISACA certifications (CISSP, CISM, CISA, CIAM, CRI:SC), SANS/GIAC, or CEH.
Five years of hands-on engineering and administration of security systems in an enterprise environment.
Advanced risk mitigation through technical innovation and process improvement.

Responsibilities

Research emerging products, services, and standards in support of security enhancement and development efforts.
Participate in security incident response activities and coordinate with team leadership to record and report incidents.
Determine baseline security configuration standards for operating systems, network segmentation, and identity and access management.
Serve as a security expert and communicate information security concepts to technical and non-technical team members.
Validate security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs, and anti-malware or endpoint protection systems.
Review network segmentation to ensure least-privilege network access.
Liaise with the internal audit team to review and evaluate the design and operational effectiveness of security-related controls.
Facilitate day-to-day infrastructure operations and maintain appropriate levels of system and data availability.
Install and support technology infrastructure and install and maintain technology-related devices.
Coordinate multiple projects, including personnel and resource coordination, documentation, and management reporting.
Provide Level III network server and infrastructure support and coordinate and schedule activities with PC Support staff.
Develop and promote standards, policies, and procedures governing the use and management of technology systems.
Participate in training, professional development, and quality improvement activities.
Perform other related duties as required.