Telecommute Information Security Engineer
Posted 12 days ago
Information Security Engineer
Job Locations
US-Remote
ID 2021-1365 Category Information Security Type Regular Full-Time
Overview
SUMMARY:
If you are interested in disrupting the healthcare market, and have the passion and competence to do so, this is your organization. We encourage you to lean in and read on.
Alegeus is the market leader in consumer directed healthcare solutions, offering the industry's most comprehensive platform for the administration of healthcare benefit accounts, the industry's most widely-used benefit debit card, and powerful engagement solutions to help consumers maximize savings and optimize spending for their healthcare. Over 300 clients - including health insurance plans, third party administrators and financial institutions - leverage Alegeus' deep expertise and proven technology to administer benefit accounts for more than 29 million members and process more than $8.9 billion in consumer healthcare payments annually. As the healthcare and benefit markets continue to evolve, Alegeus delivers solutions that enable clients to advance their service offerings, operate their businesses more efficiently, and focus on their customers.
Alegeus is part of the Vista Equity Partners portfolio of companies, working in partnership with the market-leading technology investment firm to reinvent the consumer directed healthcare marketplace. Our talented associates benefit from this partnership through increased capital for strategic investments, access to exceptional toolkits, best practices and resources for success, and strong cultural and value alignment focused on talent development and growth.
POSITION SUMMARY:
Alegeus seeks an Information Security Engineer to join our dedicated, passionate team of professionals. The Information Security Engineer will report to the Information Security Officer and be responsible for helping our company succeed by maintaining and running security systems for a healthcare technology company.
MISSION:
Security systems include: Patch Management System, Anti-Virus, Web Filter, SIEM (Security Incident Event Manager), Firewalls, Intrusion Detection/Prevention Systems. This person will also be responsible for education, training, and awareness activities; monitoring compliance with company security policy and applicable laws; and coordinating investigation and reporting of security incidents.
Responsibilities
OUTCOMES:
Support with patching; deploying updates on desktops and servers.
Day-to-day administration of security systems: Anti-Virus/Malware, Data Encryption/DLP, Web Filter, Security Incident Event Manager (SIEM), Firewalls, Intrusion Detection/Prevention Systems.
Contribute to the information governance of the organization through collaborating within and outside the team to assist Alegeus in earning SOC 1, SOC 2, and PCI-DSS compliance annually.
Contribute to Information Security Vulnerability Management.
Perform internal and external threat monitoring and reporting.
Communicate information security concepts to Alegeus' customers.
Assist developers in secure coding practices.
RESPONSIBILITIES:
Support with patching; deploying updates on desktops and servers.
Day-to-day administration of security systems: Anti-Virus/Malware, Data Encryption/DLP, Web Filter, Security Incident Event Manager (SIEM), Firewalls, Intrusion Detection/Prevention Systems.
Vulnerability Management scans of environment.
Security administration of individual and system accounts.
Proactively assesses potential items of risk and opportunities of vulnerability in the network.
Document and maintain standard operating procedures (SOP).
Support building reports for management and audits.
Research, evaluate and recommend technology products and services.
Works on multiple projects as a project team member and occasionally as a project leader.
Up to 15% travel requirement (company events, conferences, workshops etc.)
Qualifications
ROLE-BASED COMPETENCIES :
The desired candidate should have a strong background knowledge in the fields of Computer Science, Information Technology, or Cybersecurity and have the ability to communicate technical subjects to non-technical stakeholders. Information Security competencies needed to complete responsibilities as defined in the Responsibilities Section.
EDUCATION/EXPERIENCE:
Bachelor's degree preferred or equivalent combination of education and experience required for specific job level
Experience with PCI a plus
3-5 years security operations experience desired
5-7 years of IT work experience having a high level of expertise in multiple system environments; or equivalent combination of education and experience
Ability to communicate effectively verbally and in writing
Ability to establish and maintain effective working relationships with employees, vendors, clients and public
Ability to work independently as well as with a team
Experience with being on a CSIRT team
Experience with cloud computing
Experience with Microsoft Windows operating system is essential
Experience with patch management systems (GFI Languard)
Extensive knowledge of systems mentioned above
Extensive knowledge of VMware vSphere
General knowledge of storage management
Knowledge of Disaster Recovery practices and concepts
Security certifications preferred (CISSP, CISA, CISM, GIAC, CEH)
Skill to effectively analyze and solve problems
Working knowledge of any of the standards or regulations PCI, HIPAA, GLBA, SOX, ISO27001
Working knowledge of ethical hacking or penetration tests
CULTURE-BASED COMPETENCIES :
At Alegeus, equally important to the What (the individual performance goals that each employee commits to in support of the company's overall success) is the How (the framework of principles that guide how we work together to drive our business forward). Overall performance success will also take into account individual delivery on our corporate values:
Accountability
Empowerment
Protect the Family
Challenging
Fun & Passionate
Results Over Activity
Collaborative
Innovation
Value One Another
Customer Focused
Integrity
A new window will open to the job source site.
