SUMMARY

As an Information Security Engineer, your strong attention to detail and extensive knowledge of security information systems is crucial to the prevention of information loss, corruption and unauthorized access.

STATUS:  Full Time            

LOCATION:  Riedman Campus      

DEPARTMENT: Information Security

SCHEDULE:    Monday -  Friday 8am-5pm   

ATTRIBUTES

• Two (2) years focused on Information Security required
• Understanding of advanced security protocols and standards, including a demonstrated ability to perform complex analysis including producing metrics
• Knowledge of intrusion detection/prevention, firewalls, computer forensics, data loss prevention, data encryption and vulnerability management concepts
• In-depth knowledge of Windows and Linux servers' security, data loss prevention, vulnerability and penetration testing, SIEM appliances and multi-factor authentication systems
• Experience with McAfee Enterprise Product Suite preferred
• Knowledge of HIPAA, HITECH and MU Regulations preferred
• Knowledge of the HITRUST Common Security Framework preferred

RESPONSIBILITIES

• Security Management. Participate in the development, implementation and assurance of technical security strategies across Rochester Regional Health; participate in management of technical systems to maintain the confidentiality, integrity and availability of information systems; design, implement and maintain controls and procedures to ensure the integrity of the logical security for computer-based systems
• Analysis. Provide internal consulting, internal analysis and security reviews to identify secure solutions for attaining business goals and objectives; perform vulnerability scanning, ethical hacking and penetration testing of Rochester Regional Health networks
• Review. Participate in the review of network, application and system activity; information security investigations and audits, incident handling, change management, vendor security reviews, network alert monitoring and event management