Sr. Information Security Engineer

Position Overview

Array is seeking a Senior Information Security Engineer for their IT department to be based out of the Mt. Laurel, NJ office or remote. The individual will be a key part of our technology team helping to better secure corporate back office and customer facing systems. The Senior Information Security Engineer is responsible for assessing information risk and leads remediation of identified vulnerabilities organization wide. They are responsible for all security related activities including policy creation, training, assessment responses, incident response, project management, and audits. They will be key in helping to establish security SOPs and documentation. This fast-paced position is the perfect fit for an individual looking to grow (and have fun) with a rapidly expanding health care organization.

Job Responsibilities

• Assist in establishing and governing the organization’s Information Security Program
  • Lead the development of enterprise-level security strategy, standards, and architectural patterns to protect critical business applications
  • Create and maintain security documentation, policies, and procedures that meet existing and newly developed industry best practices and regulatory requirements
  • Identify and oversee security vendor partnerships including:
    • Posture assessment/audit
    • Quarterly vulnerability scans
    • Annual penetration test
    • Security solution recommendations
    • HITRUST/SOC 2 alignment and audit prep
  • Serve as technical SME for all security products and solutions including:
    • Azure Active Directory
    • Microsoft Defender for Endpoint / Office 365 or NextGen Antivirus
    • Microsoft 365 Compliance
    • Microsoft Sentinel or SIEM
  • Provide administrative support related to vulnerability scans, centralized log management, infrastructure and systems configuration hardening, and role-based access controls
  • Create process for technical vulnerability tracking – identification>triage>mitigation across:
    • Internal back office systems
    • Service delivery platforms for all lines of business
  • Facilitate and lead company-wide security education programs
    • Security awareness training
    • IT security/risk training curriculum
  • Respond to potential external client security assessments/questionnaires/RFPs in a timely fashion
  • Serve as project manager and lead on information security and compliance projects
  • Assume technical leadership role in remediating security issues, problem resolution and root cause analysis, forensic investigations as needed, and incident response communication between stakeholders
  • Evaluate existing and proposed technical architectures; recommend and implement security measures and enhancements to mitigate risk
  • Develop and author corporate DR & BCP plans and a security roadmap in coordination with IT Operations Director
  • Coordinate with Compliance Director on HIPAA compliance program
  • All other duties as assigned

Job Requirements

• Bachelor’s degree in IT Security, Information Systems, Computer Science, or related field
• 7+ years experience in information systems administration and engineering
• 5+ years experience in administering an IT organization’s technical security controls
• 2+ years experience conducting internal security assessments
• Demonstrated technical competency in security engineering based on hands-on experience or relevant qualifications
• Prior healthcare or highly regulated industry experience
• Knowledge of HIPAA guidelines
• Advanced technical knowledge of Microsoft Azure, Office 365, Exchange Online, and Endpoint Manager
• Experience with the Microsoft Defender security stack
• Experience with EDR, SIEM, CASB, IAM, and DLP technologies
• Experience establishing security policies and procedures
• Remain current on emerging security trends and technologies
• Organized and detail oriented
• Exceptional written and verbal communication skills
• Strong hands-on information security skills and experience
• Experience responding to information security incidents
• Understanding of threats, vulnerabilities and exploits

Ideal Candidate

• Industry recognized IT security certifications (CISSP, etc.)
• Passion for balance between security and systems functionality
• Outgoing personality
• Creative problem solver and self-starter
• Desire to grow and develop with the organization
• Demonstrated effectiveness working with a remote user-base
• Ability to prioritize projects and multitask
• Strong interpersonal, communication, and presentation skills necessary for interaction with business leaders and teams across all levels of the organization
• Ability to research, analyze data, and solve complex technical and process-related problems
• Experience working in IT infrastructure is a plus
• Healthcare IT experience preferred

Logistics

• Position available immediately
• Position based in Mt. Laurel, NJ or remote

The physical demands described here are representative of those that must be met by an employee to successfully perform the essential functions of this job. Reasonable accommodations may be made to enable individuals with disabilities to perform the essential functions.

While performing the duties of this job, the employee is regularly required to stand, walk, and talk or hear. The employee frequently is required to use hands to finger, handle, or feel objects, tools, or controls; reach with hands and arms; and climb or balance. The employee is occasionally required to sit and stoop, kneel, crouch, or crawl. The employee must frequently lift and/or move up to 50 pounds. Specific vision abilities required by this job include close vision, distance vision, peripheral vision, depth perception, and the ability to adjust focus.

EOE M/V/F/D