Opportunity Description
The Lead Cyber Security Engineer reporting to the Principal Cyber Security Engineer requires a background in Security engineering, vulnerability assessment, threat hunting, incident response, tools and techniques for continuously monitoring the vulnerability of an enterprise, and experience in developing security engineering solutions to improve the security of the organization's infrastructure.
The role is Remote and will be a contract position that will convert in 6 months.
Company Information
- Largest healthcare insurance/provider in the NY area.
Job Duties
The individual filling the Lead Cyber Security Architecture and Engineering role will be able to work effectively across all areas of the Cyber Security Discipline as well as having experience across information technology domains. This individual will be responsible for developing and implementing new solutions as well as providing expert guidance on security architecture and engineering. This person will be responsible for leading initiatives that cross organizational boundaries and be adept at leading in a way that delivers results, maintains a balance between competing priorities, and understands and helps stakeholders accomplish business objectives.
Provide expertise in security engineering and implementation.
- Provide expertise in managing solution and/or security initiative financials.
- Will lead a minimum delivery of one or two security capabilities and/or programs like EDR, GRC, Incident Response, PAM, IAM, SOAR, SEIM, Insider Threat, etc.
- This individual will communicate with key stakeholders, within a team, and with senior leadership.
- This individual will provide effective team leadership as well as be competent in working with organizational dynamics to drive results.
- This position will be able to provide technical team leadership and directly manage staff (admin management) if needed.
Education
- College Degree in Computer Science/ Cyber Security or Related Experience; minimum of 3 years with all required experience. Otherwise, 5+ Years.
Experience & Skills Required
Demonstrated Experience in the Following:
- The ideal candidate will have experience in security engineering, network penetration, incident response and governance risk and compliance.
- Knowledge and understanding of Identity Access Management and Privileged Access Management.
- Experience implementing and maturing security processes or solutions. (i.e. EDR, SIEM, GRC, Firewall, CASB, UEBA, DLP, Vulnerability Management, Red Teaming, Threat Hunting, or A&A, etc…)
- Secondary experience will include advanced understanding of network and server infrastructure.
- Advanced expertise across most Cyber Security competency areas
- Able to communicate effectively across teams and with key stakeholders, is effective at communicating with a team and with leadership
- Effective as a team leader, can develop others, and has competency in formal and informal leaderships, works well within a team and influences others in positive ways
- Preferred Qualifications:
- Security Plus Certification or Equivalent Experience
- CEH Certification or Equivalent Experience
- Operating Certification or Equivalent Experience
Preferred Qualifications
- Experience with Sailpoint IIQ, Sailpoint IDN and Cyberark (all products).
Compliance & Regulatory Responsibilities
- Cyber Security engineer will help ensure Healthfirst systems are secured and built in compliance with relevant Policies, Standards, Guidelines, and Laws.
- This engineer will ensure all work done is compliant from a technical and process perspective. Our primary guiding standards are HIPAA Security Rule, NIST, and HITRUST.
Certifications
- CISSP, or other Data Security certification is a plus
- AWS certification is a plus
Benefits
This is a contract-to-hire role.
