IS Security Engineer II

IS Security Engineer II-The IS Security Engineer II is responsible for implementing and maintaining corporate security along with influencing and recommending the selection of effective solutions to support business strategies. This role is essential toward maturing CareOregon’s security model. This position will spend substantial time evaluating, architecting, and implementing IS policies and systems (plan, design, install, and maintain).
Estimated Hiring Range:$102,330.00
- $125,070.00Bonus Target:Bonus
- SIP Target, 5% AnnualCurrent CareOregon Employees: Please use the internal Workday site to submit an application for this job.-Essential ResponsibilitiesSecurity Design and DevelopmentActively participate in the design and maintenance of security technologies, including but not limited to firewalls, proxy systems, logging, and other security devices.
Provide advanced security technology knowledge to the organization; participate in and consult on projects.
Advise other IS teams about best practices for security design.
Security Administration and OperationsExecute tasks related to tickets and service requests for basic to advanced activities.
Actively maintain security systems, including firewalls, proxy systems, logging, and other security devices, and vendor provided services.
Analyze business needs; research and recommend solutions which include potential risks and mitigation.
Help define, as well as build, run, and review, reports on information security system performance and event anomalies; make minor and advanced internal adjustments and identify substantial gaps based on findings.
Develop and maintain appropriate technology documentation, including current design and operation.
Standards and Policy AdministrationPropose requirements and standards for information security.
Participate in the ongoing review existing systems to ensure they are designed to comply with established standards and to empower business operations.
Participate in developing and maintaining information securing policies.
Integrate network engineers in the development and management of security policies and systems, such as firewalls, intrusion detection, and intrusion prevention devices.
Participate in planning for and supporting disaster recovery and business continuity initiatives.
Vendor Coordination and RelationsDevelop, monitor, and maintain electronic data exchanges with outside entities.
Maintain service contracts and licensing; monitor adherence to SLAs with outside parties; escalate issues as needed.
Experience and/or EducationRequiredMinimum 3 years’ experience delivering information security solutions and related services. Experience should include some or all of the following:WAN firewalls, load balancers and proxiesDesigning, configuration, and ongoing support of a network DMZDeveloping secure collaboration solutions for external partners or affiliatesComputer security combined with risk analysis, audit, and compliance objectivesITIL concepts and practicesPreferredPalo Alto Firewalls experienceOne or more of the following certifications: CISSP, GIAC certifications (GSEC, GCIA, GCIH, GPEN, etc.), CCSP, CISM and/or Microsoft Security certifications (SC-100, SC-200, AZ-500).
Additional experience in related technology support and/or operational positionsKnowledge, Skills and Abilities RequiredKnowledgeKnowledge of Vulnerability Management systems and processesKnowledge of Security Incident and Event Management (SIEM) systemsSkills and AbilitiesAdvanced in data loss prevention (DLP), Intrusion Detection systems (IDS), and Intrusion Prevention systems (IPS)Advanced in troubleshooting of system performance issues and root causeAdvanced in network transport protocols and industry standardsAbility to program using scripting languages Python, Powershell, VB, C++, and/or othersStrong process-oriented individual with awareness or knowledge of ITIL conceptsEffective communication skills, including listening, verbal, written, and customer serviceAbility to clearly articulate policies and instructionsDemonstrated progress in conveying appropriate level of detail effectively to all levels of the organization including non-technical staffDemonstrated progress in simplifying and presenting complex concepts in an easily understood wayAbility to proactively and appropriately communicate status and needsAbility to recommend policies, document risks, and propose solutions to information technology management and senior leadershipPossess a high degree of initiative and motivationAbility to effectively collaborate with coworkers, staff, and leaders across all departmentsDemonstrated progress in leading teams of people without oversightDemonstrated progress in seeing the big picture beyond a request and takes appropriate holistic action, employing “systems thinking”Effective project management skillsEffective vendor management skillsEffective organizational skillsPrioritizes work based on business need and directionEffective analytical and research sk