Sr IS Security Systems Engineer

Ochsner Clinic Foundation•New Orleans, LA

About The Position

The Senior Security Engineer is a dynamic role requiring knowledge of technology, cybersecurity, data protection, and governance practices. The engineer partners with existing teams to build and operate security services using agile methodologies across operational areas including compute, cloud, software security, databases, and other secure-system domains and processes. The position also supports the day-to-day operation and availability of technology infrastructure, provides installation and support, and coordinates projects and Level III network, server, and infrastructure support. The job may require movement through hospital and off-campus sites, occasional out-of-town travel, and flexible scheduling, including nights, weekends, or extended shifts. Physical demands include frequently exerting 10 to 20 pounds of force and occasionally exerting up to 100 pounds.

Requirements

High school diploma or equivalent.
Required IT experience: 2 years with a master's degree, 4 years with a bachelor's degree, 6 years with an associate degree, or 8 years otherwise.
Direct hands-on experience or strong working knowledge of managing security infrastructure, such as firewalls, intrusion prevention systems, web application firewalls, endpoint protection, SIEM, and log management technology.
Full-stack knowledge of IT infrastructure.
Ability to interpret business, technology, and threat drivers and develop practical security roadmaps.
Ability to translate complex security matters into terms readily understood by colleagues.
Computer skills and dexterity required for data entry and information retrieval.
Experience with regulations and frameworks such as HIPAA, PCI, and NIST.
Effective verbal and written communication skills and the ability to present information clearly and professionally.
Proficiency with Windows-style applications, role-specific software packages, and keyboard use.
Strong interpersonal skills.
Proficiency working with databases, online solutions, and programming languages.
Analytical skills and logical thought processes for formulating solutions to problems.
Ability to work under stressful situations while maintaining objective and professional communication with users, IS staff, and vendors.
Ability to work with frequent interruptions and frequent changes in priorities.
Ability to move through the hospital and off-campus sites.
Ability for occasional out-of-town travel.
Ability to work flexible schedules, including nights, weekends, and extended shifts.

Nice To Haves

Bachelor's degree in computer science, information systems, cybersecurity, or a related field.
MSCE, ISACA certifications (CISSP, CISM, CISA, CIAM, CRI:SC), SANS/GIAC, or CEH.
Five years of hands-on engineering and administration of security systems in an enterprise environment.
Advanced risk mitigation through technical innovation and process improvement.

Responsibilities

Research emerging products, services, and standards in support of security enhancement and development efforts.
Participate in security incident response activities and coordinate with team leadership to record and report incidents.
Determine baseline security configuration standards for operating systems, network segmentation, and identity and access management.
Serve as the security expert and communicate information security concepts to technical and non-technical team members.
Validate security configurations and access to security infrastructure tools, including firewalls, IPSs, WAFs, and anti-malware or endpoint protection systems.
Review network segmentation to ensure least-privilege network access.
Liaise with the internal audit team to review and evaluate the design and operational effectiveness of security-related controls.
Facilitate day-to-day infrastructure operations and maintain appropriate system and data availability.
Provide installation and support for technology infrastructure.
Install and maintain technology-related devices.
Coordinate multiple projects, including personnel and resource coordination, documentation, and management reporting.
Provide Level III network, server, and infrastructure support and coordinate and schedule activities with PC Support staff.
Develop and promote standards, policies, and procedures governing the use and management of technology systems.
Participate in training, professional development, and quality improvement activities.
Perform other related duties as required.