Cybersecurity Engineer Sr. Incident Response

Works independently or with other Cybersecurity Engineers to design and maintain cybersecurity systems through standard operating procedures, processes, and guidelines.  Leads efforts to assess risk, add new architectures, controls, and services including mentoring to other teammates. 

Maintains confidentiality, integrity, and availability of the computing environment and enforces the Acceptable Use Policy.  Provide guidance and input to management on changes needed to policies and procedures. 

Participates in incident response and provides recommendations as directed by management.  

Understands what is allowed by policy, recommends security controls, and provides guidance to other teammates.  Can provide input into the policy making process. 

Monitors all cybersecurity systems, solutions, or services and identifies potential issues and works to resolve identified issue while also assisting other teammates.   

Adheres to the confidentiality of investigations, incidents, and forensics reviews.  

Manages cybersecurity projects, assists other teammates, and provides reporting to leadership. 

Leads cybersecurity projects with autonomy.  These may include 3rd party security reviews, DLP solutions, proxies, identifying risk, vulnerabilities, remote access requests, biomedical device reviews, product selection packages, and other projects or duties defined by management. 

Provides cybersecurity training and performs presentations to large audiences of 500 people on cybersecurity topics. 

Works with sensitive information and engages with Privacy, the Legal Department, and law enforcement, where directed by leadership.  

Possesses deep knowledge of cybersecurity regulatory, technology, and operational requirements and offers solutions to address any identified requirements.

Licensure, Registration and/or Certification Required:

Proficient in Microsoft Outlook, Excel, Word, Teams, and PowerPoint. Personal computers, laptops, servers, appliances, smart devices and associated equipment. 

Deep understanding and practical experience with HIPAA, cybersecurity frameworks (NIST CSF), PCI DSS, NIST (SP) 800-82r3, and associated methodologies. 

Experience troubleshooting, reasoning, and using problem solving skills to offer solutions to complex problems across all systems. 

Ability to work individually or as part of a team and to assist other teammates. 

Must be able to multi-task and adapt to rapidly, changing priorities in a dynamic work environment while producing quality results and assisting other teammates. 

Deep understanding and practical experience in security technologies which may include, but is not limited to, Security Information and Event Management (SIEM), Vulnerability Scanners, Firewalls, VPNs, Proxies, Secure Email Gateways, Endpoint Detection and Response, Data Loss Prevention, Exact Data Matching, Medical Device Management and OT/IoT Solutions, risk management platforms, eDiscovery, Dark Web Monitoring, Remote Access Technologies, Risk Analysis and other projects or duties defined by management. 

Deep understanding and practical experience with security protocols and standards including, but not limited to, SFTP, TLS, SSH, AES, etc. 

Strong verbal and written communications skills and the ability to effectively communicate at all levels. 

Respond to customer requests in a timely manner.

Physical Requirements and Working Conditions:

This is a remote position that requires travel, therefore, will be exposed to weather and road conditions.  

Operates all equipment necessary to perform the job. 

Exposed to a normal office environment. 

Must be available for callback support on a regular basis including travel to facilities located in various states. Ability to sit for extended periods of time.  

Extensive evening and weekend hours may be required during incidents, major project go-lives, or during downtimes. 

Ability to sit for extended periods of time. 

Ability to lift and carry objects up to 40 pounds.

DISCLAIMER

All responsibilities and requirements are subject to possible modification to reasonably accommodate individuals with disabilities.

This job description in no way states or implies that these are the only responsibilities to be performed by an employee occupying this job or position.  Employees must follow any other job-related instructions and perform any other job-related duties requested by their leaders.