Cybersecurity Engineer Sr. Incident Response

About this role

Department:

12231 Enterprise Corporate - Cyber SecurityStatus:

Full timeBenefits Eligible:

YesHours Per Week:

40Schedule Details/Additional Information:

The Senior Cybersecurity Engineer will be responsible for leading complex security investigations, threat hunting activities, and cyber incident response efforts across the enterprise. This role requires a strong combination of technical expertise, analytical thinking, and the ability to collaborate across multiple teams. This is a full-time, regular position. Standard business hours with occasional after-hours support for security incidents, planned maintenance activities, and project implementations.

Pay Range: $54.90 - $82.35Major Responsibilities:

Works independently or with other Cybersecurity Engineers to design and maintain cybersecurity systems through standard operating procedures, processes, and guidelines. Leads efforts to assess risk, add new architectures, controls, and services including mentoring to other teammates.

Maintains confidentiality, integrity, and availability of the computing environment and enforces the Acceptable Use Policy. Provide guidance and input to management on changes needed to policies and procedures.

Participates in incident response and provides recommendations as directed by management.

Understands what is allowed by policy, recommends security controls, and provides guidance to other teammates. Can provide input into the policy making process.

Monitors all cybersecurity systems, solutions, or services and identifies potential issues and works to resolve identified issue while also assisting other teammates.

Adheres to the confidentiality of investigations, incidents, and forensics reviews.

Manages cybersecurity projects, assists other teammates, and provides reporting to leadership.

Leads cybersecurity projects with autonomy. These may include 3rd party security reviews, DLP solutions, proxies, identifying risk, vulnerabilities, remote access requests, biomedical device reviews, product selection packages, and other projects or duties defined by management.

Provides cybersecurity training and performs presentations to large audiences of 500 people on cybersecurity topics.

Works with sensitive information and engages with Privacy, the Legal Department, and law enforcement, where directed by leadership.

Possesses deep knowledge of cybersecurity regulatory, technology, and operational requirements and offers solutions to address any identified requirements.

Licensure, Registration and/or Certification Required:

None Required.

Education Required: Bachelor's Degree or equivalent knowledge Experience Required: 5 years of progressive IT experience (or related field) with exposure or experience in Cybersecurity. Preferred remote locations in IL, WI, NC, GA Fully Remote Role from these states: AL, AK, AR, AZ, DE, FL, GA, IA, ID, IN, IL (Only WI/IL Division), LA, KS, KY, ME, MI, MO, MS, MT, NC, ND, NE, NH, NM, NV, OH, OK, PA, SC, SD, TN, TX, UT, VA, WI, WV, WY. No relocation, No Sponsorship or transfer of visa for this position now or in the future. Knowledge, Skills & Abilities Required: Proficient in Microsoft Outlook, Excel, Word, Teams, and PowerPoint. Personal computers, laptops, servers, appliances, smart devices and associated equipment.

Deep understanding and practical experience with HIPAA, cybersecurity frameworks (NIST CSF), PCI DSS, NIST (SP) 800-82r3, and associated methodologies.

Experience troubleshooting, reasoning, and using problem solving skills to offer solutions to complex problems across all systems.

Ability to work individually or as part of a team and to assist other teammates.

Must be able to multi-task and adapt to rapidly, changing priorities in a dynamic work environment while producing quality results and assisting other teammates.

Deep understanding and practical experience in security technologies which may include, but is not limited to, Security Information and Event Management (SIEM), Vulnerability Scanners, Firewalls, VPNs, Proxies, Secure Email Gateways, Endpoint Detection and Response, Data Loss Prevention, Exact Data Matching, Medical Device Management and OT/IoT Solutions, risk management platforms, eDiscovery, Dark Web Monitoring, Remote Access Technologies, Risk Analysis and other projects or duties defined by management.

Deep understanding and practical experience with security protocols and standards including, but not limited to, SFTP, TLS, SSH, AES, etc.

Strong verbal and written communications skills and the ability to effectively communicate at all levels.

Respond to customer requests in a timely manner.

Physical Requirements and Working Conditions:

This is a remote position that requires travel, therefore, will be exposed to weather and road conditions.

Operates all equipment necessary to perform the job.

Exposed to a normal office environment.

Must be available for callback support on a regular basis including travel to facilities located in various states. Ability to sit for extended periods of time.

Extensive evening and weekend hours may be required during incidents, major project go-lives, or during downtimes.

Ability to sit for extended periods of time.

Ability to lift and carry objects up to 40 pounds.

DISCLAIMER

All responsibilities and requirements are subject to possible modification to reasonably accommodate individuals with disabilities.

This job description in no way states or implies that these are the only responsibilities to be performed by an employee occupying this job or position.Employees must follow any other job-related instructions and perform any other job-related duties requested by their leaders.

Our Commitment to You: Advocate Health offers a comprehensive suite of Total Rewards: benefits and well-being programs, competitive compensation, generous retirement offerings, programs that invest in your career development and so much more – so you can live fully at and away from work,…