[Hiring] Senior IT Security Engineer @American Medical Association

Role Description

We have an opportunity for a remote Sr IT Security Engineer on our Infrastructure Ops team. As a Sr IT Security Engineer, you will be responsible for:

• Security and cyber threat intelligence
• Industry best practices research
• Threat detection/prevention, threat triage, and response
• Designing, implementing, and maintaining security platforms and operational solutions to secure cloud-based technology and on-premise applications
• Day-to-day security technologies (e.g., firewalls, SIEM, data loss prevention, web application firewalls, application security testing, VPN)
• Collecting and generating reports and metrics for security trends and audit compliance purposes
• Designing security use cases based on business requirements
• Leading security tool administration and configuration
• Working closely with IT Engineering and Infrastructure teams to achieve security objectives and goals

Qualifications

• Bachelor’s degree required in Information Security, Engineering, Computer Science, or related field
• Demonstrated progression towards one or more security certifications; GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), CISSP/CISA certification, CISM
• 5+ years of Security Operations experience is required, including cyber incident investigations
• Strong understanding of various network and host-based security applications and tools
• Exposure to enterprise web application programming and Application Security (AppSec)
• Knowledge of browser security controls, web application security frameworks, and authentication infrastructures (SAML, OAUTH)
• Understanding of cloud networking concepts and architecture
• Excellent written and verbal communication skills
• Ability to respond to security incidents promptly and independently
• Excellent analytical, organizational and communication skills
• Experience in continuous improvements and agile methodology

Requirements

• Proactively monitor, analyze, block, and respond to malware and other emerging threats
• Conduct operational threat hunting exercises
• Perform threat modeling and risk assessments using standard security frameworks for cloud services
• Monitor and audit networks, on-premise and cloud systems
• Document incident response procedures
• Assist in management of security services providers
• Research new threats, attacks, and risks to infrastructure and software
• Define and document operating procedures for incident identification, investigation, and response
• Work with businesses to identify and address data security risks
• Analyze and make recommendations to enhance security posture
• Create or update detailed operational processes and procedures related to security operations

Benefits

• The pay range for this position in Chicago IL, California, Florida, Illinois, Indiana, Maryland, Massachusetts, New Jersey, New York, Ohio, South Carolina, Virginia, Wisconsin, or Washington D.C. is $115,523-$150,972.
• An employee’s pay within the salary range will be based on numerous factors including relevant education, qualifications, experience, skills, geographical location, and business or organizational needs.