Cyber Security Analyst jobs at United States Army War College - 19 jobs
Cyber Security Engineer - TS/SCI
Xcelerate Media 3.9
Remote
CyberSecurity Engineer - TS/SCI Xcelerate Solutions is seeking a CyberSecurity Engineer working across several Task Orders under the DOMEX Technology Platform (DTP) contract supporting NMEC. Have impact as part of a mission focused, solutions oriented, and adaptive team that values innovation, collaboration, and professional development. As a CyberSecurity Engineer, your job will be to design, develop, and implement secure systems in on-premises infrastructure. You will leverage on your experience with security technologies and industry best practices to ensure that security is integrated into system design, development, testing, and deployment and that all security requirements are compliant with the DoD Risk Management Framework. This exciting and challenging work will help you expand your capabilities in security and will provide you with the skills and experience you need to achieve additional levels of the DoD 8570 IAT and IASAE Certifications. While most work is conducted on-site at our client location in Bethesda, MD, we offer a flexible schedule and, occasionally, some tasks may be performed remotely. Percentage of remote work will vary based on client requirements/deliverables. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry. Location: Bethesda, MD Security Clearance: Active TS/SCI Responsibilities:
Support the secure architecture, design, and implementation of DoD systems in accordance with DoDI 8510.01, NIST SP 800-53, and other DoD security guidance.
Lead the integration of RMF activities into the system development lifecycle (SDLC), including selecting, implementing, and validating security controls.
Develop and maintain key security documentation such as System Security Plans (SSPs), Security Assessment Reports (SARs), Risk Assessments, and Plan of Action and Milestones (POA&Ms).
Collaborate with ISSOs, ISSMs, developers, and system owners to ensure systems are developed and maintained with approved security configurations.
Apply Security Technical Implementation Guides (STIGs) to systems and validate compliance using tools such as SCAP, STIG Viewer, and ACAS.
Maintain application, network, and database scanning infrastructure (application/product updates, database maintenance, benchmark/audit files, application/server builds, rule pack/content updates, scanner, or agent deployment etc.)
Analyze vulnerability scans and ensure timely mitigation or acceptance of risks based on DoD policies.
Provide technical input to support and maintain system authorization.
Participate in system reviews, architecture assessments, and engineering design reviews to embed cybersecurity from the outset.
Develop and implement automation or security tools to improve the compliance and monitoring of systems.
Support security incident response and forensics analysis in coordination with ISSMs and Security points of contact.
Minimum Requirements:
BS degree and 8+ years of experience in cybersecurity. Additional relevant years of experience in lieu of degree is accepted.
An active TS/SCI clearance with ability to obtain a Poly
Have at least one of the following DoD 8570.01-M IASAE Level II certifications: CISSP, CISSP-ISSAP, CISSP-ISSEP, CSSLP, or CASP+ CE. NOTE: the CISSP Associate is not acceptable
Developer experience is preferred in a least one scripting / programming language.
Experience with reviewing cybersecurity vulnerabilities for risk and relevance as well as in vulnerability mitigations/remediation planning, for identified systems, network, application and database vulnerabilities
Ability to architect, design, troubleshoot, maintain, and deploy vulnerability scanning solutions such as (OWASP, Fortify, Sonarqube, Tenable, etc.)
Experience with XACTA, EMass, or similar tool
Strong in-depth understanding of including Microsoft Windows and Linux/UNIX operating systems
Experience with middleware / web technologies (Apache, tomcat, IIS, etc.)
Experience with Databases (Postgres, MS SQL, MySQL, ElasticSearch, etc.)
Understanding of TCP/IP networking.
Experience with Continuous Integration and Continuous Delivery Platforms (Jenkins, Bamboo, GitlabCI TFS, etc.)
Familiar with NIST 800-171, 800-172, NIST SSDF, and CMMC requirements.
Experience with NIST Special Publications e.g. NIST SP 800-27, 30, 37, 53, 60, 171, NIST SSDF, CMMC requirements, and CNSS publication CNSSI 1253
Experience supporting DoD/IC systems through the entire Risk Management Framework Plus (RMF) process
Experience establishing a System Security Engineering management process to integrate security and privacy controls into complex hardware and software systems
Experience developing and reviewing security concept of operations, systems security plans, security risk assessments, contingency plans, configuration management plans
Experience with incident response plans, plan of actions and milestones, risk management plans, and vulnerability management plans
Strong communication skills; able to successfully communicate with management personnel, technical personnel and third parties.
Preferred Qualifications:
Software development/coding experience with programming languages such as Python, Java, and React
Successfully achieved ATO under RMF+
Experience with big data applications
Experience with tools for ticketing and documentation (e.g., Gitlab, Jira, Confluence).
Experience working in an Agile environment
Experience with OIDC or Oauth2
Experience with any of the following technologies:
Kubernetes, Rancher, Strimzi, or Cloudera
Active Directory
Scripting languages like bash, python, or PowerShell
About Xcelerate Solutions:
Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (*************************** is one of America's fastest-growing companies. Xcelerate's culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal's “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!
Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.
Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
$82k-116k yearly est. Auto-Apply 2h ago
Looking for a job?
Let Zippia find it for you.
Information Security Specialist/Analyst III - Information Solutions (Remote)
Medical University of South Carolina 4.6
Remote
The Information Security Specialist/Analyst III reports to the Manager, Security Operations. Under indirect supervision, the Information Security Specialist/Analyst III provides a variety of operational, compliance, and consultative functions. This position designs, implements, manages, and monitors technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of the organization's information assets. This role may be required to provide rotating 24x7 on-call support.
Entity
Medical University Hospital Authority (MUHA)
Worker Type
Employee
Worker Sub-Type
Regular
Cost Center
CC005101 SYS - IS Tidelands Integration
Pay Rate Type
Salary
Pay Grade
Health-29
Scheduled Weekly Hours
40
Work Shift
We are seeking a highly skilled and experienced Senior Information SecurityAnalyst to join our team. This role is critical in safeguarding our complex healthcare IT environment and ensuring compliance with industry standards.
Key Responsibilities:
45% - Network Security Monitoring and Incident Response:
Serve as a lead escalation point for security incidents, overseeing detection, investigation, containment, and remediation within a CrowdStrike EDR environment across a healthcare infrastructure. Experience with Microsoft Defender for Endpoint EDR is also desired.
Analyze findings from security monitoring systems, including Intrusion Detection/Prevention Systems (ID/PS) and Security Information Event Management (SIEM) consoles, to identify and respond to potential security incidents and data breaches.
Perform cybersecurity incident handling, tracking and reporting.
Utilize professional judgment and institutional knowledge to assess risk levels, conduct forensic investigations, isolate malware, identify attack vectors, provide guidance on remediation planning, and prioritize remediation efforts.
Respond to relevant service requests received from end users (e.g. for investigation of security events).
Collaborate with internal Security Operations Center (SOC) teams and external Managed Security Service Providers (MSSPs) to contain and remediate security incidents.
20% - Security Technology management:
Configure, manage, and optimize SIEM platforms (Crowdstrike and/or Microsoft Sentinel) to enhance threat detection and response capabilities.
Lead and manage large scale security-related projects, including tool implementations, upgrades, and process improvements.
10% - Vulnerability Management:
Conduct vulnerability assessments to identify security risks and report findings to system owners.
Manage workflows to ensure that protected assets are properly assessed in a timely manner.
15% - Threat Analysis
Continuously evaluate and update analytics to counter evolving Threat Actor tactics, techniques, and procedures (TTPs).
Perform risk assessments and translate business requirements into effective security controls.
Maintain comprehensive documentation and present findings to stakeholders in a clear and actionable manner.
10% - Security Awareness:
Create and deliver security awareness training for technical and non-technical audiences.
Additional Job Description
Required Education/Skills/Work Experience:
A Bachelor's degree in information security, information assurance, computer science, or a related field with 5 years of IT security experience; or 10 years of hands-on experience in information security or related IT experience required, at least 6 of which must be directly related IT security experience; or a Master's degree in information security, information assurance, computer science, or a related field, and 3 years of IT security experience required.
Advanced knowledge of information security principles, risk management, and regulatory compliance (HIPAA, FERPA, NIST, etc.).
Strong analytical and problem-solving skills with the ability to make decisions under pressure.
Hands-on experience with Crowdstrike EDR, SIEM, IDS/IPS, vulnerability management, and threat intelligence tools.
Familiarity with cloud security (Azure, AWS) and identity management solutions.
Advanced Understanding on the administration and securing of various operating systems and enterprise applications with advanced security best practices.
Excellent written and verbal communication skills, with the ability to translate technical findings into business-relevant language.
Mentor junior analysts and contribute to the development of security standards, procedures, and playbooks.
Highly Desired Certifications:
CISSP, CISM, GIAC, or equivalent.
Physical Requirements
Mobility & Posture
Standing: Continuous
Sitting: Continuous
Walking: Continuous
Climbing stairs: Infrequent
Working indoors: Continuous
Working outdoors (temperature extremes): Infrequent
Working from elevated areas: Frequent
Working in confined/cramped spaces: Frequent
Kneeling: Infrequent
Bending at the waist: Continuous
Twisting at the waist: Frequent
Squatting: Frequent
Manual Dexterity & Strength
Pinching operations: Frequent
Gross motor use (fingers/hands): Continuous
Firm grasping (fingers/hands): Continuous
Fine manipulation (fingers/hands): Continuous
Reaching overhead: Frequent
Reaching in all directions: Continuous
Repetitive motion (hands/wrists/elbows/shoulders): Continuous
Full use of both legs: Continuous
Balance & coordination (lower extremities): Frequent
Lifting & Force Requirements
Lift/carry 50 lbs. unassisted: Infrequent
Lift/lower 50 lbs. from floor to 36”: Infrequent
Lift up to 25 lbs. overhead: Infrequent
Exert up to 50 lbs. of force: Frequent
Examples:
Transfer 100 lb. non-ambulatory patient = 50 lbs. force
Push 400 lb. patient in wheelchair on carpet = 20 lbs. force
Push patient stretcher one-handed = 25 lbs. force
Vision & Sensory
Maintain corrected vision 20/40 (one or both eyes): Continuous
Recognize objects (near/far): Continuous
Color discrimination: Continuous
Depth perception: Continuous
Peripheral vision: Continuous
Hearing acuity (with correction): Continuous
Tactile sensory function: Continuous
Gross motor with fine motor coordination: Continuous
Selected Positions:
Olfactory (smell) function: Continuous
Respirator use qualification: Continuous
Work Environment & Conditions
Effective stress management: Continuous
Rotating shifts: Frequent
Overtime as required: Frequent
Latex-safe environment: Continuous
If you like working with energetic enthusiastic individuals, you will enjoy your career with us!
The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.
Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: ***************************************
$44k-59k yearly est. Auto-Apply 14d ago
Chief Information Security Officer
University of Northern Iowa 4.1
Cedar Falls, IA jobs
If you are a current University of Northern Iowa employee and would like to apply for this position, login to UNI Works and type "Find Jobs" in the search bar to view and apply for open positions. Job Description: The Opportunity
UNI is seeking a Chief Information Security Officer (CISO) who wants to own and shape an ever evolving institutional information security program. The CISO provides institution-level leadership for this program, reports to the Chief Information Officer, and leads the information security office within the Information Technology (IT) department. This role is responsible for setting direction for information security, managing risk in a way that supports teaching, learning, research, and operations, and building a culture where security is understood as an enabler of the university mission. The CISO works closely with campus partners to balance security, usability, and budget in a regional comprehensive setting where collaboration is essential.
Key Responsibilities
The CISO will:
* Provide institution level leadership for UNI's information security and privacy program, including strategy, governance, and day to day operations of the information security office.
* Identify and assess information security, privacy, and technology risks and recommend and implement standards, control frameworks, and processes that support teaching, learning, research, and operations in a regional comprehensive university setting.
* Design and maintain a modern security architecture across networks, systems, applications, cloud services, and data platforms, aligned with university policies, Board of Regents expectations, and applicable regulatory and contractual requirements.
* Oversee identity and access management, including account lifecycle, multi factor authentication and authorization, privileged access, and related governance and controls.
* Lead incident monitoring, detection, investigation, and response, including post incident reviews that drive continuous improvement and realistic risk reduction. Significant incidents may occasionally require leadership and coordination outside standard business hours.
* Partner with IT units and campus leaders to embed security and privacy requirements into technology planning, solution design, procurement, and change management, including vendor and third-party technology risk, digital accessibility, and AI related initiatives.
* Develop and champion security awareness and education efforts for the university community and provide consulting support so departments and IT staff can implement secure, practical solutions.
* Lead, coach, and develop a collaborative, customer focused security team and build strong partnerships with IT units, colleges, divisions, and administrative offices.
* Participate in and help lead information security governance processes, manage designated budgets, recommend tools and services, and represent UNI with Regents partners, peer institutions, government entities, auditors, insurers, and relevant professional organizations.
About You
Required qualifications
* Bachelor's degree, preferably in information technology, computer science, information systems, cybersecurity, business, or a related field.
* At least seven years of progressive experience in information security, risk management, or closely related IT leadership roles, including experience leading or serving as a primary owner for one or more major components of an enterprise or institutional information security program.
* Demonstrated experience leading information security work that includes most of the following: security governance, risk assessment, incident response, identity and access management, vendor and third-party technology risk, security policy development, and security architecture or design.
* Strong interpersonal communication, relationship building, change leadership, and strategic planning skills.
* Experience working in a complex, decentralized organization and building strong relationships and influence across diverse stakeholders.
Preferred qualifications
* Master's degree in a related field.
* Professional security certifications such as CISSP, CISM, CRISC, or equivalent.
* Experience in higher education, public sector, or another complex non profit institution.
* Experience with cloud security, vendor and third-party risk management, and budget management.
* Experience partnering on or supporting technology aspects of digital accessibility and responsible AI use, or a clear interest in learning and leading in these areas.
* Experience with network and systems security architecture and analysis and familiarity with regulatory and compliance frameworks such as FERPA, GLBA, HIPAA, PCI DSS, CMMC, or similar standards.
Position Details:
Job Category: Professional and Scientific
Type of Position: Annual
Service Schedule: Calendar Year
This position is eligible for a hybrid schedule. Remote work must be performed within the state of Iowa. Employees who elect remote work must comply with the requirements of our remote work policy and agreement.
Application Instructions:
All application materials received by December 10, 2025, will be given full consideration. To apply for this position, please click on "Apply" and complete the Employment Application. The following materials must be attached when applying:
1) Resume
2) Cover Letter
You will be presented with the opportunity to attach multiple documents when completing the application. Before submitting your online job application, ensure that ALL required materials listed above have been uploaded. Once your job application has been submitted, you cannot make changes. If you have questions regarding this application process, please email *********************** or call ************.
Compensation:
$130,000 to Commensurate
Pay Grade: 124
Pay Basis: Salary
Iowa enjoys a lower cost of living than many other states. See how the Waterloo-Cedar Falls area compares by utilizing the cost of living calculator. Our overall compensation package is enhanced by excellent benefits for eligible non-temporary positions. To learn more about the vibrant Cedar Valley community, visit ***************************
If you would like general assistance with the application process or an accommodation due to a disability, please contact Human Resource Services at ********************** or call **************.
All offers of employment are contingent upon a background check that includes a review of conviction history. A conviction does not automatically preclude University employment. Rather, the University considers conviction information on a case-by-case basis and assesses the nature of the offense, the circumstances surrounding it, the proximity in time of the conviction, and its relevance to the position.
UNI is an Equal Opportunity/Affirmative Action employer. The University encourages applications from persons of color, women, individuals living with disabilities, and protected veterans. All qualified applicants will receive consideration for employment without regard to age, color, creed, disability, ethnicity, genetic information, marital status, national origin, political affiliation, pregnancy, race, religion, sex, sexual orientation, veteran or military status, or any other basis protected by federal and/or state law.
Campus Security & Crime Statistics, in compliance with the Jeanne Clery Disclosure of Campus Security Policy and Campus Crime Statistics Act, information on crime statistics for recent years, Public Safety personnel and programs, building access, reporting crimes, safety suggestions, and policies, programs, and services regarding alcohol, drugs, and sexual abuse, is available in the UNI Annual Security and Fire Report. A paper copy is available from the Department of Public Safety, 030 Gilchrist Hall, University of Northern Iowa, Cedar Falls, IA 50614. Department of Public Safety, 030 Gilchrist Hall, University of Northern Iowa, Cedar Falls, IA 50614.
Privacy Statement | Equal Opportunity and Non-Discrimination Statement | Federal EEO Rights | E-Verify | Policies and Procedures | Tobacco Free Campus
$130k yearly Auto-Apply 60d+ ago
Junior Security Engineer
Universal Technical Resource Services, Inc. 4.6
Marlton, NJ jobs
Universal Technical Resource Services, Inc. (UTRS) is seeking a motivated Junior Security Engineer to join our dynamic Cybersecurity Consulting and Managed Security Services Team. In this entry-level role, you'll gain hands-on experience in security operations while supporting a diverse client base. If you're passionate about cybersecurity and eager to grow your skills in a collaborative, hybrid work environment, we encourage you to apply.
This position will join our Cybersecurity Consulting and Managed Security Services Team. This is a hybrid, entry-level, security operations support role.
The position is structured as a hybrid role, allowing for a mix of on-site collaboration and remote work flexibility.
This role is ideal for candidates with a foundational cybersecurity certification (CompTIA Security+ or equivalent) who is looking for hands-on experience in security operations, while directly supporting clients.
What will you be doing?
This position will be a key member of the Cybersecurity Consulting and Managed Security Services Team.
Duties include:
Cybersecurity / MSS Duties
Assist with onboarding new MSS clients, deploying security services (EDR, SIEM, MFA, vulnerability scanning)
Set up and manage security awareness training (SAT) and phishing campaigns, track completion, and generate client-facing reports.
Perform initial triage of SOC alerts, document incidents, and escalate high-severity events
Support SIEM tuning including refining alert thresholds, validating false positives, and configuring log sources under supervision.
Launch vulnerability scans, export reports, and document findings under senior engineer guidance.
Communicate with clients, deliver initial SOC notifications, and present SAT status updates
What skills will the ideal candidate have to be successful?
This position will require the following skillsets and experience:
CompTIA Security+ (required) or equivalent entry-level certification
Knowledge of SOC operations, including alerting, incident handling, and escalation
Familiarity with SIEM and EDR tools.
Experience in IT or technical support
Strong foundational knowledge of networks, operating systems, and cybersecurity principles
Excellent communication skills for both internal and client-facing interactions
Experience with phishing simulations and/or awareness training platforms
Must be US citizen (due to some contract requirements)
Read about our benefits here: Our Benefits - UTRS | Thinking Forward
UTRS is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. UTRS is a drug-free workplace with pre-employment drug testing and background verifications.
For more information or to apply now, go to the website below:
********************************************************************************************
**********************************************************************************************************
******************************************************
$83k-101k yearly est. 21d ago
Information Security Specialist: Governance & Compliance Engineer
United States Court of Appeals for The Sixth Circuit 4.3
Cincinnati, OH jobs
The Information Security Specialist works with the IT security team to ensure the security of court systems and serve as a security resource to courts within the Sixth Circuit for their governance and compliance program. The major responsibilities and duties include the following:
In coordination with the Circuit IT Security Officer (ITSO), respond to emergent threats, assist court units in the circuit, and track and report progress. Assist in identifying, prioritizing, and coordinating the protection of critical cyber infrastructure and key resources.
Provide guidance and assistance in implementing and maintaining business objectives (i.e. security scorecard, CIS controls, assessments, internal audit controls, security data calls).
Manage information security projects (or security-related aspects of other IT projects). Coordinate and lead IT staff and court users to identify, plan, and implement initiatives and projects. Prepare and present reports and training.
Develop and maintain a documentation template repository; modernize and maintain the circuit's data repository. Review and advise courts on documentation requirements.
Assist the Circuit ITSO in performing, analyzing, and archiving SWOT and other gap analyses to ensure compliance with required frameworks, controls, and assessment.
Manage CIS controls self-assessment too; provide guidance and assistance to courts on documentation, program management, etc.
Assist the Circuit ITSO in creating, tracking, and maintaining KPIs. Prepare scheduled data points and KPIs for use in reports to circuit-wide executives and other Judiciary stakeholders.
Research custom solutions for courts as needed.
Qualifications
Required: Four years of experience in information security systems. Experience with cybersecurity compliance programs. Strong communication and interpersonal skills; excellent customer service skills. Detailed, organized, and self-driven. Ability to work under pressure and within the constraints of conflicting deadlines. Proactive, problem-solving approach. Ability to respond effectively in critical situations. Ability to work independently and in a team environment. Ability to travel (25% - 50%).
Preferred: Bachelor's degree in computer science or related field. Related cybersecurity or IT project management certifications. Related experience in a court, government agency, or equivalent environment.
Total Rewards & Work/Life Balance
Compensation*: $87,791 - $142,732 (CL 29) (*Salary commensurate with qualifications)
Benefits: Employer subsidized health and life insurance plans. Dental and vision insurance plans. Flexible spending accounts for health care, dependent care, and commuter expenses. Eligibility for Public Service Loan Forgiveness Program and mass transit subsidies. On-site fitness center. Federal retirement entails a pension plan (FERS-FRAE) and employer-matching Thrift Savings Plan (similar to a 401K). Retirees may carry insurance plans into retirement while paying the same premiums as employees. Visit ********************************* to learn more about the Judiciary's competitive benefits.
Work/Life: Annual time off - 13 vacation days, 13 sick leave days, and 11 paid holidays. Vacation days increase to 20 days after three years and to 26 days after fifteen years. Hybrid telework schedule may be available.
Conditions of Employment
Travel for this position is required. The selected candidate is provisionally hired pending results of background investigation/check and fingerprinting. This position is subject to updated background investigations every five years. Applicants selected for an interview must complete the Optional Background Information section on the Judiciary's application. Employees are required to adhere to the
Judicial Code of Conduct for Judicial Employees
.
Electronic Fund Transfer for payroll direct deposit is required. Positions with the U.S. Courts are at-will, excepted service appointments, and may be terminated with or without cause by the Court. For citizenship requirements and additional information about careers in the Judiciary, visit ************************* The Court reserves the right to modify the conditions of this announcement, or to withdraw the announcement for any reason without notice.
How To Apply
Please submit a single PDF application packet, including (1) a cover letter addressing your qualifications and experience in relation to the job duties and how you learned of the position, (2) a current resume, to the Director of Human Resources via the Resume button on our online application system. Position is open until filled; preference given to applications received by January 5, 2026. Virtual interviews available.
The United States Court of Appeals for the Sixth Circuit is an equal opportunity employer. For a reasonable accommodation during the recruitment process, contact Human Resources at **************.
$87.8k-142.7k yearly Auto-Apply 57d ago
Cyber Security Engineer I
Relias 4.5
North Carolina jobs
Are you looking for a high energy, strategic, and fast-paced position as a CyberSecurity Engineer I? Join Relias, the company changing lives throughout the world by helping healthcare organizations improve their clinical and financial outcomes!
For 11,000+ health care and human service organizations, Relias helps clients deliver better clinical and financial outcomes by elevating the performance of teams. We help organizations across the continuum of care get better at maintaining compliance, developing staff and promoting consistent, high-quality care. Our platform employs assessments to reveal specific gaps in skills and addresses them with personalized and engaging learning, choosing from 7,000+ online courses that meet accrediting board, state and federal requirements. We are passionate about our products and our clients; what we deliver and the impact we have on the world is truly something you can be proud to represent. Join us and make a difference.
WHAT CAN RELIAS OFFER YOU?
Fantastic health and wellness benefits package, including an outstanding 401k match, a flexible PTO program, and a generous and inclusive parental leave policy. Additionally, Relias pays for the employee portion of the monthly healthcare premium!
Flexible work environment with onsite and work from home options - you choose when you want to come into the office!
Active Employee Resource Groups open to all employees!
Comprehensive onboarding program - a great introduction to our company, customers and culture!
Growth and career advancement opportunities!
Multiple development program options - leadership development, professional development curriculums, and Nanodegree options in both technology and data science
Professional development gained from conference attendance and participation in organizations like NC Tech
Onsite 321 Coffee Shop providing free coffee and pastries to employees
The CyberSecurity Engineer is responsible for designing, implementing and maintaining the security technologies, systems, and processes that protect the organization's systems, networks, data, and applications. The role works closely with IT, software developers, compliance, SOC, and product teams to provide security insight, identify security risks, engineer secure solutions, support ongoing monitoring and support in incident response actions.
The ideal candidate will have good technical skills, analytical mindset, and a proactive approach to threat prevention and optimally have an interest threat analysis, incident response, network security and/or application security.
WHAT YOU'LL BE DOING:
The CyberSecurity Engineer I is a diverse role with skills and tasks which may include:
• Security Assessments: Perform security assessments and penetration tests on software applications, identify vulnerabilities and confirm alignment with security frameworks and regulatory requirements.
• Application Evaluation: Evaluate web and mobile applications for security flaws.
• Vulnerability Identification: Use various tools and methodologies to identify and exploit application vulnerabilities.
• Reporting: Prepare comprehensive assessment reports documenting vulnerabilities, risk assessments, and remediation steps.
• Process Improvement: Continuously improve application security testing processes and methodologies.
• Security Engineering: Deploy and maintain security controls which may endpoint protection, SIEM, IDS/IPS, firewalls, vulnerability management platforms and IAM technologies.
• Incident Response: cyberattacks to assess incident response capabilities and collaborate with response teams.
• Threat Awareness: Stay informed about emerging threats and evolving security best practices.
• Policy Development: Contribute to developing and enhancing security policies and guidelines.
• Security Tool Utilization: Stay current with and utilize industry-standard security tools for testing.
• Collaboration: Work with other cybersecurity and IT teams to enhance security posture.
YOU'VE GOT WHAT IT TAKES IF YOU HAVE:
• Problem-solving: Demonstrates strong analytical skills to identify, assess, and recommend solutions for application security vulnerabilities.
• Communication: Exhibits clear and concise communication skills for preparing comprehensive assessment reports and collaborating with other teams.
• Adaptability: Shows flexibility and the ability to stay updated with the latest security tools, methodologies, and emerging threats in a dynamic environment.
• Collaboration: Works effectively with other cybersecurity and IT teams to improve the security posture and share critical insights.
• Time Management: Manages time efficiently to prioritize security assessments, testing, and reporting within deadlines.
• Vulnerability Management: Skilled in identifying and exploiting vulnerabilities within software applications, using various tools and methodologies to ensure secure applications.
• Configuration Management: Proficient in assessing and improving security configurations of web and mobile applications to prevent unauthorized access and data breaches.
• Incident Management: Capable of collaborating with incident response teams to simulate cyberattacks and assess the organization's incident response capabilities.
• Application Security Testing: Advanced knowledge in conducting security assessments and penetration tests on software applications to identify and remediate vulnerabilities.
• Access Control: Proficient in implementing and managing access controls within applications to safeguard sensitive information.
• Audit Logging and Monitoring: Proficient in documenting assessment results and maintaining detailed logs to support compliance and forensic analysis.
• Data Protection & Privacy: Knowledgeable in applying data protection best practices to safeguard sensitive information during security assessments.
• Network Protection: Skilled in collaborating with cybersecurity teams to enhance the organization's overall network security posture.
• 1+ years of experience in threat hunting, incident response, or a related cybersecurity role.
• Bachelor's degree in CyberSecurity, Information Technology, Computer Science or equivalent experience
Relias is an Equal Opportunity Employer and a Drug-Free workplace
IN OFFICE REQUIREMENT:
Relias values collaboration and wants to ensure that our team members have opportunities to work with their teams regularly for professional development opportunities. Our flexible hybrid work environment requires that you live in the state of North Carolina, within a commutable distance to our office (~1-hour commute). You would be expected to work in our Morrisville, NC Headquarters approximately 30 days/quarter.
Company: Relias LLC | Job ID: 285392
$82k-104k yearly est. 31d ago
Information Assurance (IA) Security Specialist (Contingent II Position)
Bowie State University 4.2
Remote
Job Posting: ) (Open) Department: Technology Security, JM Non-Regular Fixed Term (Fixed Term) Responsible for providing security and risk analysis of engineering solutions, to include technical solution development, testing, implementation, and integration.
Responsibilities:
* Performs technical security assessments of computing environments to
identify points of vulnerability, non-compliance with established IA
standards and regulations and recommends mitigation strategies.
* Assists in the development, implementation, updating of security
policies and monitoring of IT security procedures; validates and verifies
system security requirement definitions and analysis.
* Coordinates Enterprise Application Security with Functional Data
Stewards to ensure access verification and authorization requirements
are monitored and approved.
* Maintains Enterprise Application Security Business processes and works
with Senior IA staff in workflow management of security and access
requests and approval.
* Integrates IA, security systems and system components including those
for networking, computing, and enclave environments.
* Ensures IA best practices are integrated into systems and operational
environments; assists in the identification and implementation of
appropriate information security functionality.
* Interfaces with IT and non-IT personnel to resolve security related
issues; assesses and mitigates system security threats/risks throughout
the program life cycle.
* Performs security, analyses and risk, vulnerability assessments; supports
the handling, reporting, recording, and resolution of campus-wide
security incidents.
* Ensures security is embedded via processes and systems throughout the
university by working with various university departments; other duties
as assigned.
Minimum Qualifications:
* Minimum two (2) years of experience in information security or other related
field.
Preferred Qualifications:
* Bachelor's Degree in Information Technology, Information systems, or related
field preferred.
Conditions of Employment:
* Potential on-call hours.
* Potential remote work opportunities.
* Non-Union Position.
Additional Job Information:
Bowie State University shall not discriminate against any individual on the basis of race, color, religion, age, ancestry or national origin, sex, sexual orientation, disability, marital status or veteran status. All policies, programs, and activities of Bowie State University are and shall be in conformity with all pertinent Federal and state laws of nondiscrimination including, but not limited to: Title VII of the Civil Rights Act of 1964, as amended, Title IX of the Education Amendments of 1972, the Equal Pay Act of 1963, the Age Discrimination Act, Sections 503 and 504 of the Rehabilitation Act of 1973, the Americans with Disabilities Act of 1990, Federal Executive Order No. 11375, and Article 49B of the Annotated Code of Maryland. This commitment applies in all areas and embraces faculty, staff, and students.
Equal opportunity of access to academic and related programs shall be extended to all persons. Bowie State University shall have as its firm objective equal opportunity in recruitment and hiring, rate of pay, all other promotions, training, retention and dismissals, for all employees and applicants for employment. The University will stress equal access for employees and applicants for employment to all programs and services provided by the University both on and off campus. The University will also provide equal opportunity and an atmosphere of nondiscrimination with respect to women and members of minority groups in all its operations. In addition, the University shall promote equal opportunity and equal treatment through a positive and continuing Affirmative Action Program.
The University makes, and will continue to make, reasonable accommodations to promote the employment of qualified individuals with disabilities and disabled veterans, unless such accommodations would impose an undue hardship on the University's business.
In addition, employees and applicants will not be subjected to harassment, intimidation, threats, coercion, or discrimination because they have engaged in, or may have engaged in, activities such as filing a complaint, assisting or participating in an investigation, compliance review or hearing, or opposing any act or practice made unlawful, or exercising any other right protected by Section 503 of the Rehabilitation Act of 1973, as amended or the Vietnam Era Veterans Readjustment Assistance Act of 1974, as amended.
$63k-77k yearly est. Auto-Apply 60d+ ago
IAM Epic Security Analyst 1
University of Washington 4.4
Seattle, WA jobs
UW MEDICINE IT SERVICES has an outstanding job opportunity for an IAM Epic SecurityAnalyst 1.
WORK SCHEDULE
100% FTE - 40 hours per week
Day Shift - UW MEDICINE ITS SERVICES CORE HOURS ARE 08:00 - 17:00 (PST), Monday-Friday
DEPARTMENT DESCRIPTION
UW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.
POSITION HIGHLIGHTS
100% remote opportunity
15 days of vacation your first year - Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year
100% matching, 100% immediately vesting 403(b)
PRIMARY JOB RESPONSIBILITIES
Using business and data analysis to independently troubleshoot and resolve complex Epic security related issues
Performing user provisioning, integrations, audits, and other daily operations of the Epic Security team
Ensuring compliance with HIPAA, other regulatory requirements, policies, and procedures are met
Identifying risks and collaborating with Epic Security team on resolution and with ITS Leadership on recommendations for risk mitigation enhancements
Managing on-going security roles and controls for Epic and interconnected applications, including:
Development, implementation, and maintenance
Collaborating with Epic application teams to create, monitor, and maintain operational configurations of Epic security for efficient and appropriate operations
Managing access and authorization activities across the identity lifecycle
Performing independent application testing, including:
Independent activities for Epic security build, testing, and record creation processes
Making appropriate access decisions in conjunction with application coordinators/analyst and operations
Identifying and analyzing customer system requirements for continuous improvements
Maintaining knowledge of vendor application architecture as it relates to the UW Medicine's systems environment as well as any new or modified vendor solutions that could benefit our organization
REQUIREMENTS
Bachelor's degree in Computer Science, Information Technology, Business Administration, or related field or equivalent education and/or experience.
2+ years of experience to include:
2+ years of IT experience with demonstrated experience in systems analysis, administration, or support; preferably on mission-critical clinical information systems
Demonstrated experience working with Epic or comparable EHR system
Demonstrated experience independently gathering requirements for the creation of new or changes to existing roles in a healthcare application
Demonstrated experience with database management, programming, or access
Demonstrated experience independently creating and managing end user workflows
ABOUT UW MEDICINE - WHERE YOUR IMPACT GOES FURTHER
UW Medicine is Washington's only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine's mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow's physicians, scientists and other health professionals.
All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.
Become part of our team. Join our mission to make life healthier for everyone in our community.
Compensation, Benefits and Position Details
Pay Range Minimum:
$75,000.00 annual
Pay Range Maximum:
$100,008.00 annual
Other Compensation:
-
Benefits:
For information about benefits for this position, visit ******************************************************
Shift:
First Shift (United States of America)
Temporary or Regular?
This is a regular position
FTE (Full-Time Equivalent):
100.00%
Union/Bargaining Unit:
Not Applicable
About the UW
Working at the University of Washington provides a unique opportunity to change lives - on our campuses, in our state and around the world.
UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.
Our Commitment
The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81.
To request disability accommodation in the application process, contact the Disability Services Office at ************ or **********.
Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.
$75k-100k yearly 15d ago
Senior ServiceNow Security Operations Engineer
Southern New Hampshire University 4.6
Remote
Southern New Hampshire University is a team of innovators. World changers. Individuals who believe in progress with purpose. Since 1932, our people-centered strategy has defined us - and helped us grow a team that now serves over 180,000 learners worldwide.
Our mission to transform lives is made possible by talented people who bring diverse industry experience, backgrounds and skills to the university. And today, we're ready to expand our reach. All we need is you.
Make an impact - from near or far
At SNHU, you'll have the option to work remotely in the following states: Alabama, Arizona, Arkansas, Delaware, Florida, Georgia, Hawaii, Idaho, Indiana, Iowa, Kansas, Kentucky, Louisiana, Maine, Maryland, Massachusetts, Michigan, Mississippi, Missouri, Nebraska, New Hampshire, New Mexico, North Carolina, North Dakota, Ohio, Oklahoma, South Carolina, South Dakota, Tennessee, Texas, Utah, Vermont, Virginia, West Virginia, Wisconsin and Wyoming.
We ask that our remote employees have access to a reliable internet connection and a dedicated, properly equipped workspace that is free of distractions. Employees must reside in, and work from, one of the above approved states.
The opportunity
The Senior ServiceNow Security Operations Engineer reports directly to the Director of Information Security Engineering. You will play a mission-critical role in advancing the security capabilities of SNHU's ServiceNow platform. This senior-level engineer leads the technical direction, development, and optimization of the platform's Security Operations modules, specifically Security Incident Response (SIR) and Vulnerability Response (VR), while ensuring understanding of SNHU's enterprise platform standards.
Serving as both a strategic architect and hands-on engineer, you will collaborate with the ServiceNow platform team, ITS engineering groups, and external partners to deliver secure, scalable, and automated solutions that enhance incident detection, response, and remediation. As the subject matter expert (SME) for security-related ServiceNow capabilities, the Senior Engineer ensures high-quality implementation, system resiliency, and long-term platform scalability.
You will work remotely from any of our approved states. #LI-Remote
What You'll Do
Architect and lead the development of ServiceNow Security Incident Response (SIR) and Vulnerability Response (VR) features to ensure enterprise-grade functionality, understanding of SNHU's security policies, and adherence to platform architecture standards.
Provide advanced daily administration and operational support of the Security Operations modules within ServiceNow, including support for integrations, workflows, and configuration updates.
Be a primary contact for SNHU-specific customizations within the VR and SecOps modules. Responsibilities include ongoing assessment of customizations during quarterly patches and platform upgrades, verifying their continued relevance and ensuring understanding of SNHU's evolving security operations processes.
Troubleshoot and resolve complex technical issues involving performance, data quality, platform stability, workflow logic, and integration functionality.
Lead custom development and scripting using ServiceNow best practices, including the creation and maintenance of business rules, client scripts, UI policies/actions, ACLs, notifications, and scheduled jobs to support Security Operations functionality.
Design and implement secure and scalable integrations between ServiceNow and other enterprise systems, including security tools and infrastructure platforms. Integration methods include REST/SOAP APIs, MID Servers, SSO, LDAP, FTPS, and other secure protocols.
Coordinate testing and troubleshooting activities with third-party vendors and managed service providers. This includes working directly with vendor resources such as DeepWatch and Tenable to validate integration health, test enhancements, and address service issues.
Maintain the health, performance, and availability of the platform, with a focus on the stability and effectiveness of the Security Operations modules. Ensure compliance with SNHU's platform governance standards.
Be a senior escalation point for all ISMO (Information Security Management Office) related ServiceNow issues. Lead root cause analysis and mitigation efforts for critical incidents improving security workflows or platform capabilities.
Be a subject matter expert on the disciplines of Vulnerability Response and Security Incident Response and how they are implemented and operationalized in ServiceNow. Provide strategic guidance to ensure SNHU's use of ServiceNow aligns with industry best practices and institutional needs.
Provide mentorship and technical guidance to junior engineers, administrators, and external developers. Conduct code reviews, enforce development standards, and promote coding practices across all security related platform work.
Collaborate with teams in information security, risk management, and IT infrastructure to translate security and compliance requirements into scalable, automated solutions within ServiceNow.
Promote communication between the ServiceNow platform team and VR/SecOps practitioners during major incidents, security events, planned patches, and platform upgrades. Ensure issue tracking, and resolution.
Participate in Business Verification Testing (BVT) during platform patches, upgrades, and new feature rollouts. Ensure that SNHU specific customizations continue to function as intended and confirm that new ServiceNow functionality does not override or render legacy customizations obsolete.
Maintain stewardship of test cases and use cases specific to SNHU's implementation of VR and SecOps modules. Ensure these are stored securely, are up to date, and reflect current business and security requirements.
Be a subject matter expert for CMDB data from a security tooling perspective. Provide expertise on data ownership and source of truth when new security tools introduce asset or configuration data into the CMDB, or when source questions arise.
Support ongoing compliance work related to SNHU's use of ServiceNow Security Operations tooling. This includes facilitating transitions to newly supported modules or applications within the VR/SecOps suite to ensure SNHU maintains n-1 versioning and remains aligned with vendor support lifecycles.
Manage ISMO related platform enhancements through established IT change management and release control processes.
Contribute to the creation and maintenance of technical documentation and platform knowledge resources to support operational continuity, knowledge transfer, and platform sustainability.
Participate in vendor evaluation, onboarding, and performance review processes related to ServiceNow development services, support agreements, or security-specific application vendors.
What We're Looking For:
4+ years of ServiceNow administration and development experience.
5+ years of experience working with ITSM frameworks and understanding of ITIL-aligned processes.
Relevant certifications such as ITIL Foundation, ServiceNow Certified Application Developer (CAD), ServiceNow Certified System Administrator (CSA).
6+ Months of relevant experience collaborating with end users of the Security Incident Response and Vulnerability Response modules to design, support, test, document, and tailor effective customizations for the application.
Experience with JavaScript, Flow Designer, and other platform scripting tools and Agile or DevOps delivery models.
Experience building secure and ServiceNow integrations using REST, SOAP, MID servers, and authentication protocols.
Proficient in building dashboards, reports, and Service level agreement metrics in ServiceNow.
Experience with ServiceNow GRC or Security Orchestration, Automation, and Response (SOAR) capabilities.
We believe real innovation comes from inclusion - where different experiences, perspectives and talents are celebrated. So if you're wondering whether SNHU is right for you, take the leap and apply. You might be just the person we're looking for.
Compensation
The annual pay range for this position is $94,130.00 - $150,634.00. Actual offer will be based on skills, qualifications, experience and internal equity, in addition to relevant business considerations. We expect this position to be hired in the following target hiring range $104,012.00 - $140,723.00.
Exceptional benefits (because you're exceptional)
You're the whole package. Your benefits should be, too. As a full-time employee at SNHU, you'll get:
High-quality, low-deductible medical insurance
Low to no-cost dental and vision plans
5 weeks of paid time off (plus almost a dozen paid holidays)
Employer-funded retirement
Free tuition program
Parental leave
Mental health and wellbeing resources
$104k-140.7k yearly Auto-Apply 3d ago
NAESOC/Industrial Security Analyst - Top Secret
Xcelerate Media 3.9
Remote
NAESOC Analyst
Xcelerate Solutions is seeking a National Access Elsewhere Security Oversight Center (NAESOC) Analyst to support the Defense Counterintelligence and Security Agency's NAESOC in applying risk-based industrial security operations to protect the defense industrial base. In this role, you will be responsible for identifying risk to cleared facilities and supporting personnel in mitigating security threats, through coordination with industrial security representatives, continuous monitoring, and execution of research and analysis on cleared companies and key management personnel. Come join our award-winning organization and work with some of the most talented and brightest minds in the GovCon industry.
Location:
Hanover, MD/Hybrid
Security Clearance:
Secret or Top Secret (Preferred)
Responsibilities:
Apply knowledge of the NISPOM and DCSA data systems to support data analytics and threat identification and monitoring
Provide knowledge and expertise in identification of risk to cleared facilities and personnel
Support development of tailored risk mitigation strategies
Execute continuous monitoring to assess effectiveness of security programs at cleared facilities
Perform facility baselining and monitoring as part of a broader risk-based oversight model; to include research/analysis of business operations and key management personnel
Perform security violation processing as a result of reported and unreported security violations
Conduct outreach to targeted cleared facilities to support identification of risk and aid in enhancement of risk mitigation strategies
Minimum Requirements:
3+ years' experience with security-related data systems such as NISS (prior ISFD and eFCL) and DISS
1+ years' experience supporting or executing Facility Security Officer (FSO) duties
1+ years' experience with risk mitigation methodology
1+ years' experience developing risk mitigation strategies
3+ years' experience identifying risk to industrial security and responding to risk in executing the NISPOM
3+ years' experience planning, organizing, monitoring, and coordinating courses of action
3+ years' experience gathering metrics and analyzing data for trends and resource allocation
3+ years' experience reviewing and providing educational instruction on industrial security topics
About Xcelerate Solutions:Founded in 2009 and headquartered in McLean, VA, Xcelerate Solutions (*************************** is one of America's fastest-growing companies. Xcelerate's culture is defined by our diversified workforce of dynamic and versatile professionals, supported with growth and development opportunities that contribute to individual and company growth. This strong commitment to our employees has been recognized by our inclusion on the Washington Business Journal's “50 Best Places to Work” list as well as being a “Great Place to Work” certified company with a 4.6 star, and a 99% CEO approval Glassdoor rating. Come find out why Xcelerate Solutions is one of the DC Metro top employers!
Xcelerate Solutions is an Equal Employment Opportunity/Affirmative Action Employer. We evaluate qualified applicants without regard to race, color, national origin, religion, age, equal pay, disability, veteran status, sex, sexual orientation, gender identity, genetic information, or expression of another protected characteristic. As part of this commitment to the full inclusion of all qualified individuals, Xcelerate provides reasonable accommodations if needed because of an applicant's or an employee's disability.
Pay Transparency Notice: Xcelerate Solutions will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant.
$68k-103k yearly est. Auto-Apply 2h ago
Information System Security Officer
University of Dayton, Ohio 4.6
Dayton, OH jobs
Secure Your Future with the University of Dayton Research Institute! The University of Dayton's Research Institute (UDRI) is seeking a highly motivated and experienced Information System Security Officer to join our dynamic Sensor & Software Systems division in Warner Robins, GA. This is an exceptional opportunity to be part of a renowned research institution committed to excellence, innovation, and community engagement.
The Information System Security Officer (ISSO) position is supporting the Air Force Rapid Sustainment Office (RSO). The RSO increases mission readiness by rapidly identifying, applying and scaling technology essential to the operation and sustainment of the U.S. Air Force. Success comes from our teamwork and mutual respect for each other's talents and unique perspectives.
This role supports the government cyber lead and provides cybersecurity support for advanced software-intensive technologies to include agile manufacturing, conditioned-based maintenance, augmented reality/virtual reality, cloud-based infrastructure and services, and robotics.
Responsibilities:
• Serve as cybersecurity technical advisor, consultant, and primary point of contact to the Program Manager, Information System Owner, and other stakeholders for the Information systems
• Assessing systems for vulnerabilities and providing corrective recommendations.
• Supporting government Cyber lead in performing RMF activities leading to system RMF acceptance IAW DoDI 8510.01, NIST 800-series special publications, USAF policy and instructions, and guidance as applicable on RSO IT systems in networked, standalone, and cloud configurations.
• Support, coordinate, and continuously monitor system security posture and ensure adverse events are formally handled and reported
• Developing, reviewing, and updating necessary documentation associated with achieving RMF accreditation of each system.
• Applying currently accepted methods for documenting the RMF status of each RSO system within the DoD environment.
• Security Technical Implementation Guides (STIGs) for all systems
• Managing projects in compliance with DoD and AF RMF policies including but not limited to the following:
o DoDI 8500.01 - Cybersecurity Risk Management Framework for DoD Information Technology.
o DoD 8570.01 M - Information Assurance Training, Certification, and Workforce Management.
o CNSSI 1253 - Security Categorization and Control Selection for National Security Systems.
o NIST 800-series Special Publications (SP).
o Computer Security, including SP 800-53 - Security Controls and Assessment Procedures for Federal Information Systems and Organizations and Air Force Instruction Series 17.
Cyberspace:
Accomplishing system categorization, security control selection, security control implementation, security control assessment, and security control monitoring, including, but not limited to, accomplishing the RMF steps as outlined in DoDI 8510.01 on a system-by-system basis
• Providing system performance reporting.
• Support System Administrator for multiple cloud projects and implementations.
• Supporting Interim Authority to Test (IATT)/ Authority to Operate (ATO) planning and execution.
Minimum Qualifications:
• Associates Degree in Cybersecurity, Computer Science, or related field
• 3+ years relevant cybersecurity experience
• Experience with the NIST RMF process
• Security Technical Implementation Guides (STIGs) application experience
• The applicant must meet DoD 8570.01-M IAT Level II or higher certification requirements on hire date (Security+ CE)
• Familiarity with the DOD Information Assurance Vulnerability Management program
• Effective verbal and written communication skills
• Ability to obtain a Secret level security clearance
• Due to the requirements of our research contracts with the U.S. federal government, candidates for this position must be a U.S. citizen
Preferred Qualifications:
While not everyone may possess all of the preferred qualifications, the ideal candidate will bring many of the following:
• 5+ years' DoD cybersecurity experience
• IAT Level III or IAM Level I Certification
• Bachelor's Degree in Cybersecurity, Computer Science, or related field
• Additive Manufacturing experience
• Systems Administration experience
• Experience with Secure Development Operations Systems, as either a user, developer, or system administrator
• Experience with submission of system security package to DoD for ATO, IATO, etc
• Active Secret level security clearance.
• Familiarity with Enterprise Mission Assurance Support Service (eMASS).
• Experience with approved government cloud services such as Microsoft Azure, Amazon Web Services, Google Cloud.
• Relevant cloud infrastructure and security certifications (i.e. Office365, SharePoint, Amazon AWS)
• Cloud Application experience
• Experience managing various project activities ensuring accurate task completion
Special Instructions to Applicants:
To apply please submit a cover letter addressing each minimum qualification and any applicable preferred qualifications that you meet.
Closing Statement:
Informed by its Catholic and Marianist mission, the University is committed to the principles of diversity, equity, and inclusion. Informed by this commitment, we seek to increase diversity, achieve equitable outcomes, and model inclusion across our campus community. As an Affirmative Action and Equal Opportunity Employer, we will not discriminate against minorities, women, protected veterans, individuals with disabilities, or on the basis of age, race, color, national origin, religion, sex, sexual orientation or gender identity.
$57k-70k yearly est. 60d+ ago
Senior Security Engineer (Detection & Response)
Lifeway 3.8
Remote
Lifeway is seeking a Senior Security Engineer | Detection & Response who plans and carries out security measures to monitor and protect sensitive data, networks and systems from infiltration and cyber-attacks. This role is responsible for the design, implementation, and support of a variety of complex projects supporting the SOC and security engineering functions. This role is a critical escalation point for Security Detection and has technical responsibility for the managed SOC and security engineering including the documentation of processes, procedures, and technical solutions.
Why Lifeway?
Lifeway is a place where you can bring your faith and work experience to join in the most important mission in the world: making disciples of Jesus Christ. Whether you're a creator or storyteller, data guru or problem-solver, or anywhere in between, if you're passionate about serving the church, we have a place for you. Lifeway has a strong Work from Anywhere (WFA) culture that is deeply focused on our mission and values. While headquartered in Nashville, TN, many of our positions are remote-eligible and have autonomy and flexibility with work hours. We provide equipment and resources to ensure team members have access to a productive and ergonomic workspace. We believe building relationships and community is essential to how we work together, so Lifeway hosts all-team meetings several times per year and provides travel for key team gatherings for remote-based team members. Full-time employees are eligible for enrollment in our comprehensive benefits plans including healthcare, vacation and sick time, holiday pay, care days, 401(k) plan, maternity and paternity leave, adoption assistance, mission trip time, and more. If this sounds like a place where you would be excited to serve the kingdom of God, we would love for you to join our team.
Learn more about our culture at team.lifeway.com/culture-code
This is a remote position in the U.S. with occasional travel to Nashville for in-person team gatherings. #LI-Remote
Responsibilities
Lives out Lifeway's mission and values, showing deep commitment to Kingdom work
Plan, Design, build, implement, and administers security systems and processes within a modern cloud computing environment
Designs cloud security solutions to ensure adequate protection, detection and response of the environment
Cultivate and manage relationships with 3rd parties (Managed detection & response providers, partners, vendors), and other associated entities to ensure coverage of risks and agreements to performance
Partners cross functionally for security monitoring and incident response
Ensures information security practices are compliant with PCI and other standards and regulations
Leverage frameworks and threat modeling to help identify needs and drive maturity
Build and leverage metrics & processes to ensure operational excellence and resolve technical problems
Qualifications
Education
Bachelor's degree in computer science, cybersecurity, information technology, or related degree,
required
Master's degree,
not required
Advanced graduate degree (PhD, etc),
not required
Skills, Knowledge, & Experiences, required
Expert knowledge of cloud security solutions, anti-malware solutions, intrusion prevention, and web content filtering
Experience with cloud architecture and coding (AWS, GCP, Azure)
Expert knowledge of risk assessment tools, technologies, and methods
Strong knowledge of coding, technologies and methods
Strong ability to develop and execute incident response plans, identify root cause, and drive mitigations to prevent future occurrences
Strong ability to enumerate and address security control gaps, abnormal behavior patterns and attack techniques in cloud environments
Knowledge of applicable regulations and frameworks including PCI, NIST-CSF and MITRE ATT&C
Actively involved in an evangelical Christian church
Skills, Knowledge, & Experiences, preferred
CISSP, GIAC, CCSK, CCSP certifications
Familiarity with AWS Organizations Service Control Policies (SCP), Resource Control Policies (RCP), and Declarative Policies.
Familiarity with infrastructure-as-code (Terraform, CloudFormation), Containers and Serverless functions. (2+ years)
$113k-152k yearly est. Auto-Apply 60d+ ago
IAM Epic Security Analyst 1
University of Washington 4.4
Campus, IL jobs
UW MEDICINE IT SERVICES has an outstanding job opportunity for an IAM Epic SecurityAnalyst 1. WORK SCHEDULE * 100% FTE - 40 hours per week * Day Shift - UW MEDICINE ITS SERVICES CORE HOURS ARE 08:00 - 17:00 (PST), Monday-Friday DEPARTMENT DESCRIPTION UW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), UW Medicine Primary Care (UWMPC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.
POSITION HIGHLIGHTS
* 100% remote opportunity
* 15 days of vacation your first year - Also, 12 days of sick time, 1 personal holiday, and 11 paid holidays each year
* 100% matching, 100% immediately vesting 403(b)
PRIMARY JOB RESPONSIBILITIES
* Using business and data analysis to independently troubleshoot and resolve complex Epic security related issues
* Performing user provisioning, integrations, audits, and other daily operations of the Epic Security team
* Ensuring compliance with HIPAA, other regulatory requirements, policies, and procedures are met
* Identifying risks and collaborating with Epic Security team on resolution and with ITS Leadership on recommendations for risk mitigation enhancements
* Managing on-going security roles and controls for Epic and interconnected applications, including:
* Development, implementation, and maintenance
* Collaborating with Epic application teams to create, monitor, and maintain operational configurations of Epic security for efficient and appropriate operations
* Managing access and authorization activities across the identity lifecycle
* Performing independent application testing, including:
* Independent activities for Epic security build, testing, and record creation processes
* Making appropriate access decisions in conjunction with application coordinators/analyst and operations
* Identifying and analyzing customer system requirements for continuous improvements
* Maintaining knowledge of vendor application architecture as it relates to the UW Medicine's systems environment as well as any new or modified vendor solutions that could benefit our organization
REQUIREMENTS
* Bachelor's degree in Computer Science, Information Technology, Business Administration, or related field or equivalent education and/or experience.
* 2+ years of experience to include:
* 2+ years of IT experience with demonstrated experience in systems analysis, administration, or support; preferably on mission-critical clinical information systems
* Demonstrated experience working with Epic or comparable EHR system
* Demonstrated experience independently gathering requirements for the creation of new or changes to existing roles in a healthcare application
* Demonstrated experience with database management, programming, or access
* Demonstrated experience independently creating and managing end user workflows
ABOUT UW MEDICINE - WHERE YOUR IMPACT GOES FURTHER
UW Medicine is Washington's only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine's mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow's physicians, scientists and other health professionals.
All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.
Become part of our team. Join our mission to make life healthier for everyone in our community.
Compensation, Benefits and Position Details
Pay Range Minimum:
$75,000.00 annual
Pay Range Maximum:
$100,008.00 annual
Other Compensation:
* Benefits:
For information about benefits for this position, visit ******************************************************
Shift:
First Shift (United States of America)
Temporary or Regular?
This is a regular position
FTE (Full-Time Equivalent):
100.00%
Union/Bargaining Unit:
Not Applicable
About the UW
Working at the University of Washington provides a unique opportunity to change lives - on our campuses, in our state and around the world.
UW employees bring their boundless energy, creative problem-solving skills and dedication to building stronger minds and a healthier world. In return, they enjoy outstanding benefits, opportunities for professional growth and the chance to work in an environment known for its diversity, intellectual excitement, artistic pursuits and natural beauty.
Our Commitment
The University of Washington is committed to fostering an inclusive, respectful and welcoming community for all. As an equal opportunity employer, the University considers applicants for employment without regard to race, color, creed, religion, national origin, citizenship, sex, pregnancy, age, marital status, sexual orientation, gender identity or expression, genetic information, disability, or veteran status consistent with UW Executive Order No. 81.
To request disability accommodation in the application process, contact the Disability Services Office at ************ or **********.
Applicants considered for this position will be required to disclose if they are the subject of any substantiated findings or current investigations related to sexual misconduct at their current employment and past employment. Disclosure is required under Washington state law.
$75k-100k yearly 15d ago
Information Security Specialist/Analyst III - Information Solutions (Remote)
Medical University of South Carolina 4.6
South Carolina jobs
The Information Security Specialist/Analyst III reports to the Manager, Security Operations. Under indirect supervision, the Information Security Specialist/Analyst III provides a variety of operational, compliance, and consultative functions. This position designs, implements, manages, and monitors technical, administrative, and physical controls to protect the confidentiality, integrity, and availability of the organization's information assets. This role may be required to provide rotating 24x7 on-call support.
Entity
Medical University Hospital Authority (MUHA)
Worker Type
Employee
Worker Sub-Type
Regular
Cost Center
CC005101 SYS - IS Tidelands Integration
Pay Rate Type
Salary
Pay Grade
Health-29
Scheduled Weekly Hours
40
Work Shift
We are seeking a highly skilled and experienced Senior Information SecurityAnalyst to join our team. This role is critical in safeguarding our complex healthcare IT environment and ensuring compliance with industry standards.
Key Responsibilities:
45% - Network Security Monitoring and Incident Response:
Serve as a lead escalation point for security incidents, overseeing detection, investigation, containment, and remediation within a CrowdStrike EDR environment across a healthcare infrastructure. Experience with Microsoft Defender for Endpoint EDR is also desired.
Analyze findings from security monitoring systems, including Intrusion Detection/Prevention Systems (ID/PS) and Security Information Event Management (SIEM) consoles, to identify and respond to potential security incidents and data breaches.
Perform cybersecurity incident handling, tracking and reporting.
Utilize professional judgment and institutional knowledge to assess risk levels, conduct forensic investigations, isolate malware, identify attack vectors, provide guidance on remediation planning, and prioritize remediation efforts.
Respond to relevant service requests received from end users (e.g. for investigation of security events).
Collaborate with internal Security Operations Center (SOC) teams and external Managed Security Service Providers (MSSPs) to contain and remediate security incidents.
20% - Security Technology management:
Configure, manage, and optimize SIEM platforms (Crowdstrike and/or Microsoft Sentinel) to enhance threat detection and response capabilities.
Lead and manage large scale security-related projects, including tool implementations, upgrades, and process improvements.
10% - Vulnerability Management:
Conduct vulnerability assessments to identify security risks and report findings to system owners.
Manage workflows to ensure that protected assets are properly assessed in a timely manner.
15% - Threat Analysis
Continuously evaluate and update analytics to counter evolving Threat Actor tactics, techniques, and procedures (TTPs).
Perform risk assessments and translate business requirements into effective security controls.
Maintain comprehensive documentation and present findings to stakeholders in a clear and actionable manner.
10% - Security Awareness:
Create and deliver security awareness training for technical and non-technical audiences.
Additional Job Description
Required Education/Skills/Work Experience:
A Bachelor's degree in information security, information assurance, computer science, or a related field with 5 years of IT security experience; or 10 years of hands-on experience in information security or related IT experience required, at least 6 of which must be directly related IT security experience; or a Master's degree in information security, information assurance, computer science, or a related field, and 3 years of IT security experience required.
Advanced knowledge of information security principles, risk management, and regulatory compliance (HIPAA, FERPA, NIST, etc.).
Strong analytical and problem-solving skills with the ability to make decisions under pressure.
Hands-on experience with Crowdstrike EDR, SIEM, IDS/IPS, vulnerability management, and threat intelligence tools.
Familiarity with cloud security (Azure, AWS) and identity management solutions.
Advanced Understanding on the administration and securing of various operating systems and enterprise applications with advanced security best practices.
Excellent written and verbal communication skills, with the ability to translate technical findings into business-relevant language.
Mentor junior analysts and contribute to the development of security standards, procedures, and playbooks.
Highly Desired Certifications:
CISSP, CISM, GIAC, or equivalent.
Physical Requirements
Mobility & Posture
Standing: Continuous
Sitting: Continuous
Walking: Continuous
Climbing stairs: Infrequent
Working indoors: Continuous
Working outdoors (temperature extremes): Infrequent
Working from elevated areas: Frequent
Working in confined/cramped spaces: Frequent
Kneeling: Infrequent
Bending at the waist: Continuous
Twisting at the waist: Frequent
Squatting: Frequent
Manual Dexterity & Strength
Pinching operations: Frequent
Gross motor use (fingers/hands): Continuous
Firm grasping (fingers/hands): Continuous
Fine manipulation (fingers/hands): Continuous
Reaching overhead: Frequent
Reaching in all directions: Continuous
Repetitive motion (hands/wrists/elbows/shoulders): Continuous
Full use of both legs: Continuous
Balance & coordination (lower extremities): Frequent
Lifting & Force Requirements
Lift/carry 50 lbs. unassisted: Infrequent
Lift/lower 50 lbs. from floor to 36”: Infrequent
Lift up to 25 lbs. overhead: Infrequent
Exert up to 50 lbs. of force: Frequent
Examples:
Transfer 100 lb. non-ambulatory patient = 50 lbs. force
Push 400 lb. patient in wheelchair on carpet = 20 lbs. force
Push patient stretcher one-handed = 25 lbs. force
Vision & Sensory
Maintain corrected vision 20/40 (one or both eyes): Continuous
Recognize objects (near/far): Continuous
Color discrimination: Continuous
Depth perception: Continuous
Peripheral vision: Continuous
Hearing acuity (with correction): Continuous
Tactile sensory function: Continuous
Gross motor with fine motor coordination: Continuous
Selected Positions:
Olfactory (smell) function: Continuous
Respirator use qualification: Continuous
Work Environment & Conditions
Effective stress management: Continuous
Rotating shifts: Frequent
Overtime as required: Frequent
Latex-safe environment: Continuous
If you like working with energetic enthusiastic individuals, you will enjoy your career with us!
The Medical University of South Carolina is an Equal Opportunity Employer. MUSC does not discriminate on the basis of race, color, religion or belief, age, sex, national origin, gender identity, sexual orientation, disability, protected veteran status, family or parental status, or any other status protected by state laws and/or federal regulations. All qualified applicants are encouraged to apply and will receive consideration for employment based upon applicable qualifications, merit and business need.
Medical University of South Carolina participates in the federal E-Verify program to confirm the identity and employment authorization of all newly hired employees. For further information about the E-Verify program, please click here: ***************************************
$37k-50k yearly est. Auto-Apply 4d ago
Junior Security Engineer
Universal Technical Resource Services, Inc. 4.6
Marlton, NJ jobs
Universal Technical Resource Services, Inc. (UTRS) is seeking a motivated Junior Security Engineer to join our dynamic Cybersecurity Consulting and Managed Security Services Team. In this entry-level role, youll gain hands-on experience in security operations while supporting a diverse client base. If youre passionate about cybersecurity and eager to grow your skills in a collaborative, hybrid work environment, we encourage you to apply.
This position will join our Cybersecurity Consulting and Managed Security Services Team. This is a hybrid, entry-level, security operations support role.
The position is structured as ahybrid role, allowing for a mix of on-site collaboration and remote work flexibility.
This role is ideal for candidates with a foundational cybersecurity certification (CompTIA Security+ or equivalent) who is looking for hands-on experience in security operations, while directly supporting clients.
What will you be doing?
This position will be a key member of the Cybersecurity Consulting and Managed Security Services Team.
Duties include:
Cybersecurity / MSS Duties
Assist with onboardingnew MSS clients, deploying security services (EDR, SIEM, MFA, vulnerability scanning)
Set up and manage security awareness training (SAT)and phishing campaigns, track completion, and generate client-facing reports.
Perform initial triage of SOC alerts, document incidents, and escalate high-severity events
Support SIEM tuning including refining alert thresholds, validating false positives, and configuring log sources under supervision.
Launch vulnerability scans, export reports, and document findings under senior engineer guidance.
Communicate with clients, deliver initial SOC notifications, and present SAT status updates
What skills will the ideal candidate have to be successful?
This position will require the following skillsets and experience:
CompTIA Security+ (required) or equivalent entry-level certification
Knowledge of SOC operations, including alerting, incident handling, and escalation
Familiarity with SIEM and EDR tools.
Experience in IT or technical support
Strong foundational knowledge of networks, operating systems, and cybersecurity principles
Excellent communication skills for both internal and client-facing interactions
Experience with phishing simulations and/or awareness training platforms
Must be US citizen (due to some contract requirements)
Read about our benefits here:Our Benefits - UTRS | Thinking Forward
UTRS is an Equal Opportunity employer. All qualified applicants will receive consideration for employment without regard to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected Veteran status, age, or any other characteristic protected by law. UTRS is a drug-free workplace with pre-employment drug testing and background verifications.
For more information or to apply now, go to the website below:
********************************************************************************************
**********************************************************************************************************
******************************************************
$83k-101k yearly est. 23d ago
Engineer, Information Security
Mariner High School 4.2
Remote
We are currently seeking strong candidates for a full-time Information Security Engineer position in our Overland Park, Kansas headquarters.
Responsibilities Responsible for the analysis and implementation, testing, operations, and maintenance of Information Security solutions.
Conduct assessments as required for the Information Security Program to determine whether systems performed as expected and provides input to the determination of operational effectiveness.
Day-to-day support for Information Security and Technology functions:
o Malware Response Process
o Log Management Process
o Malware Response Process
o Vulnerability Management Process
o Tracking and reporting on information generated by Information Security Program activities.
Analysis of the security aspects of new or existing computer applications, software, or specialized utility programs. Draw insights about their possible implications and provide appropriate recommendations.
Qualifications
Bachelor's degree from an accredited college/university or equivalent experience
3 - 5 years' of work experience , financial services industry experience a plus
Skills & Knowledge
Strong self-starter who thrives in a fast-paced, dynamic environment
Experience confidently and collaboratively working with individuals at all levels of an organization
Ability to conceptualize and support big picture concepts and goals of the organization
Has excellent verbal and written communication skills to provide an exceptional client service experience
Strong attention to detail and critical thinking skills
Highly organized, able to manage multiple tasks with tight deadlines
We welcome your interest in being a part of our firm. We believe in giving associates progressive opportunities, actively nurturing professional growth and giving back to the community. We are dedicated to building a diverse culture where everyone has the support they need to achieve their career goals. We offer an innovative workplace and a culture that fosters camaraderie, teamwork and work-life balance.
EOE/M/F/D/V
$65k-82k yearly est. Auto-Apply 7d ago
Senior Information Security Engineer - Endpoint Engineer
University of Chicago Medicine 4.7
Darien, IL jobs
Join a world-class academic healthcare system, UChicago Medicine, as a Senior Information Security Engineer in our Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.
This role will be that of a Senior Information Security Engineer. This person will lead our effort in enhancing and maturing our defensible architecture across our network and Cloud solutions. Besides the network related tasks, this role will also assist Incident Response as needed and will require solid written skills to document improvement to processes and procedures. This role will also be primarily responsible for the creation of Standard Operating Procedures for our SOC operations related to all Network Security solutions implemented by you.
Under general direction of Information Security leadership, implement and operate security controls to minimize risk to physical and logical assets of the University of Chicago Medical Center and to ensure the confidentiality and integrity of UCMC sensitive information. The Information Security Engineer will assist with the core security activities of UCMC and lead many enhancement projects. This includes but is not limited to design and implementation of enterprise network security systems, security operations, threat analysis, log and event management, and network monitoring.
Essential Job Functions
Primary subject matter expert for all Endpoint Security related functions.
Deploy, configure, and manage Endpoint Detection and Response (EDR) solutions (e.g., CrowdStrike, Microsoft Defender ATP, SentinelOne).
Design and maintain endpoint security architectures (Windows, Mac, Linux).
Assist other security engineering and consulting needs as they arise.
Develop project plans and manage project teams for security related projects.
Provide communications, including status reporting, risk management, escalation of issues, and in general, making sure the project is delivered on budget, on schedule, and within scope.
Other duties as assigned.
Required Qualifications
BS or BA degree in Computer Science or other IT related field, or combination of education and work experience
8 years of Information Security experience , preferably at least 3 years in a Senior or Lead Engineering role
5 years' experience maintaining and designing Defense-in-Depth strategies for complex network architectures
Proficiency in deploying, configuring, and troubleshooting EDR and AV solutions
Effective written and verbal communication skills
Good working knowledge of the Plan, Build, Run model within an IT environment
Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed
Expert understanding of TCP/IP (OSI Layers 1- 4) and Internet and Intranet technologies (OSI Layers 5-7)
Good knowledge of Windows and Linux Operating Systems
Good knowledge of vulnerability management, risk analysis, and forensics preferred
Experience with HIPAA, NIST, FERPA, and SOX preferred
Position Details
Job Type/FTE: Full-time
Shift: Days
Location: Remote
Department: Information Security
CBA Code: Non-Union
Why Join Us
We've been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We're in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you'd like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we're doing work that really matters. Join us. Bring your passion.
UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at:
UChicago Medicine Career Opportunities
UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.
As a condition of employment, all employees are required to complete a pre-employment physical, background check, drug screening, and comply with the flu vaccination requirements prior to hire. Medical and religious exemptions will be considered for flu vaccination consistent with applicable law.
Compensation & Benefits Overview
UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.
The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.
Review the full complement of benefit options for eligible roles at
Benefits - UChicago Medicine
.
$86k-112k yearly est. Auto-Apply 29d ago
Senior Information Security Engineer - Cloud Engineer
University of Chicago Medical Center 4.7
Chicago, IL jobs
Join a world-class academic healthcare system, UChicago Medicine, as a Senior Information Security Engineer in our Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.
This role will be that of a Senior Information Security Engineer. This person will lead our effort in enhancing and maturing our defensible architecture across our network and Cloud solutions. Besides the network related tasks, this role will also assist Incident Response as needed and will require solid written skills to document improvement to processes and procedures. This role will also be primarily responsible for the creation of Standard Operating Procedures for our SOC operations related to all Network Security solutions implemented by you.
Under general direction of Information Security leadership, implement and operate security controls to minimize risk to physical and logical assets of the University of Chicago Medical Center and to ensure the confidentiality and integrity of UCMC sensitive information. The Information Security Engineer will assist with the core security activities of UCMC and lead many enhancement projects. This includes but is not limited to design and implementation of enterprise network security systems, security operations, threat analysis, log and event management, and network monitoring.
Essential Job Functions
* Design, deploy, and manage security solutions within Cloud environments(Azure experience preferred).
* Assist other security engineering and consulting needs as they arise.
* Implement cloud security controls and monitor compliance frameworks (Azure Security Center, Azure Policy, etc.).
* Collaborate with development, operations, and compliance teams to achieve security goals.
* Document security processes and procedures for all Cloud related monitoring and response personnel.
* Develop project plans and manage project teams for security related projects.
* Provide communications, including status reporting, risk management, escalation of issues, and in general, making sure the project is delivered on budget, on schedule, and within scope.
* Other duties as assigned.
Required Qualifications
* BS or BA degree in Computer Science or other IT related field, or combination of education and work experience
* 8 years of Information Security experience required, preferably at least 3 years in a Senior or Lead Engineering role
* Minimum 5 years' experience in cloud security engineering, focusing on Microsoft Azure.
* 5 years' experience maintaining and designing Defense-in-Depth strategies for complex network architectures
* Solid understanding of threat modeling, risk assessment, and Cloud Security best practices
* In-depth knowledge of network routing and defensible architectures in Cloud environments, such as Azure, AWS or Google Cloud
* In-depth knowledge of computing systems, data network communications, and network architecture
* Effective written and verbal communication skills
* Good working knowledge of the Plan, Build, Run model within an IT environment
* Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed
* Expert understanding of TCP/IP (OSI Layers 1- 4) and Internet and Intranet technologies required (OSI Layers 5-7)
* Good knowledge of Windows and Linux Operating Systems
* Good knowledge of vulnerability management, risk analysis, and forensics preferred
* Experience with HIPAA, NIST, FERPA, and SOX preferred
Position Details
* Job Type/FTE: Full-time
* Shift: Days
* Location: Remote
* Department: Information Security
* CBA Code: Non-Union
Why Join Us
We've been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We're in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you'd like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we're doing work that really matters. Join us. Bring your passion.
UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at: UChicago Medicine Career Opportunities
UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.
As a condition of employment, all employees are required to complete a pre-employment physical, background check, drug screening, and comply with the flu vaccination requirements prior to hire. Medical and religious exemptions will be considered for flu vaccination consistent with applicable law.
Compensation & Benefits Overview
UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.
The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.
Review the full complement of benefit options for eligible roles at Benefits - UChicago Medicine.
$86k-112k yearly est. 3d ago
Senior Information Security Engineer - Cloud Engineer
University of Chicago Medicine 4.7
Chicago, IL jobs
Join a world-class academic healthcare system, UChicago Medicine, as a Senior Information Security Engineer in our Information Security department. This is a remote, work from home opportunity, and you may be based outside of the greater Chicagoland area.
This role will be that of a Senior Information Security Engineer. This person will lead our effort in enhancing and maturing our defensible architecture across our network and Cloud solutions. Besides the network related tasks, this role will also assist Incident Response as needed and will require solid written skills to document improvement to processes and procedures. This role will also be primarily responsible for the creation of Standard Operating Procedures for our SOC operations related to all Network Security solutions implemented by you.
Under general direction of Information Security leadership, implement and operate security controls to minimize risk to physical and logical assets of the University of Chicago Medical Center and to ensure the confidentiality and integrity of UCMC sensitive information. The Information Security Engineer will assist with the core security activities of UCMC and lead many enhancement projects. This includes but is not limited to design and implementation of enterprise network security systems, security operations, threat analysis, log and event management, and network monitoring.
Essential Job Functions
Design, deploy, and manage security solutions within Cloud environments(Azure experience preferred).
Assist other security engineering and consulting needs as they arise.
Implement cloud security controls and monitor compliance frameworks (Azure Security Center, Azure Policy, etc.).
Collaborate with development, operations, and compliance teams to achieve security goals.
Document security processes and procedures for all Cloud related monitoring and response personnel.
Develop project plans and manage project teams for security related projects.
Provide communications, including status reporting, risk management, escalation of issues, and in general, making sure the project is delivered on budget, on schedule, and within scope.
Other duties as assigned.
Required Qualifications
BS or BA degree in Computer Science or other IT related field, or combination of education and work experience
8 years of Information Security experience , preferably at least 3 years in a Senior or Lead Engineering role
Minimum 5 years' experience in cloud security engineering, focusing on Microsoft Azure.
5 years' experience maintaining and designing Defense-in-Depth strategies for complex network architectures
Solid understanding of threat modeling, risk assessment, and Cloud Security best practices
In-depth knowledge of network routing and defensible architectures in Cloud environments, such as Azure, AWS or Google Cloud
In-depth knowledge of computing systems, data network communications, and network architecture
Effective written and verbal communication skills
Good working knowledge of the Plan, Build, Run model within an IT environment
Some scripting or programming skills (PERL, Python, PowerShell, etc.) preferred as needed
Expert understanding of TCP/IP (OSI Layers 1- 4) and Internet and Intranet technologies (OSI Layers 5-7)
Good knowledge of Windows and Linux Operating Systems
Good knowledge of vulnerability management, risk analysis, and forensics preferred
Experience with HIPAA, NIST, FERPA, and SOX preferred
Position Details
Job Type/FTE: Full-time
Shift: Days
Location: Remote
Department: Information Security
CBA Code: Non-Union
Why Join Us
We've been at the forefront of medicine since 1899. We provide superior healthcare with compassion, always mindful that each patient is a person, an individual. To accomplish this, we need employees with passion, talent and commitment… with patients and with each other. We're in this together: working to advance medical innovation, serve the health needs of the community, and move our collective knowledge forward. If you'd like to add enriching human life to your profile, UChicago Medicine is for you. Here at the forefront, we're doing work that really matters. Join us. Bring your passion.
UChicago Medicine is growing; discover how you can be a part of this pursuit of excellence at:
UChicago Medicine Career Opportunities
UChicago Medicine is an equal opportunity employer. We evaluate qualified applicants without regard to race, color, ethnicity, ancestry, sex, sexual orientation, gender identity, marital status, civil union status, parental status, religion, national origin, age, disability, veteran status and other legally protected characteristics.
As a condition of employment, all employees are required to complete a pre-employment physical, background check, drug screening, and comply with the flu vaccination requirements prior to hire. Medical and religious exemptions will be considered for flu vaccination consistent with applicable law.
Compensation & Benefits Overview
UChicago Medicine is committed to transparency in compensation and benefits. The pay range provided reflects the anticipated wage or salary reasonably expected to be offered for the position.
The pay range is based on a full-time equivalent (1.0 FTE) and is reflective of current market data, reviewed on an annual basis. Compensation offered at the time of hire will vary based on candidate qualifications and experience and organizational considerations, such as internal equity. Pay ranges for employees subject to Collective Bargaining Agreements are negotiated by the medical center and their respective union.
Review the full complement of benefit options for eligible roles at
Benefits - UChicago Medicine
.
$86k-112k yearly est. Auto-Apply 31d ago
Learn more about United States Army War College jobs