Senior Security Engineer

The role of the Senior Security Engineer is to identify, evaluate, conduct, schedule, and lead technical Information Security analyses functions to ensure all applicable HCA information Security requirements are met.Provide technical analyses of Information Security requirements necessary for the protection of all information processed, stored or transmitted by systems; interpret those requirements; and translate, implement and administer plans, policies, and procedures necessary to ensure compliance. Represent Information Security on security-related matters with other entities, as assigned. Provide advice, guidance to senior management, systems managers, systems users and custodians relative to Information Security matters. Design and implement infrastructure in order to meet business needs. Perform other functions assigned by Information Security management.

 



This position requires being able to perform the duties in the following areas:


Access Controls:  Technical Access Control Software.  Administer and maintain user access control systems by providing controls, processes and procedures to prevent the unauthorized access, modification, disclosure, misuses, manipulation or destruction of HCA information.

 

Access Controls:  Violations Analysis.  Administer and monitor the use of HCA access control software systems, analyze all systems, infractions and violations and document/report the results of questionable user and system activity for inquiries.

 

Noncompliance Inquiry:  Identify and analyze business practice irregularities, violations and infractions.  Conduct detailed inquiries, assess potential damage, monitor corrective action and recommend cost-effective preventative measures to preclude recurrences.

 

Risk Assessment:  Perform limited risk assessments of HCA systems and processes, determine their threats, vulnerabilities and risks and recommend cost-effective risk mitigation solutions.

Test and Evaluations:  Information Security System Documentation.  Schedule and conduct Information Security tests and evaluation on stand-alone (non-networked) systems to ensure the systems are processing in accordance with applicable HCA-approved procedures.

 

TECHNICAL EXPERIENCE:

 

Hardware/Operating Systems: NOKIA/IPSO (general knowledge), SUN/Solaris (general knowledge), INTEL/W2K, NT Windows XP (general knowledge), UNIX/Linux, Cisco Network Devices, Firewall (Checkpoint or Raptor or PIX)

 

Applications/software:  Checkpoint, Visio, Remote management (PCAnywhere or Terminal Server), Ticketing application ( CA or Tivoli or Remedy)


Networking: LAN/WAN, TCP/IP, VPN/IPSEC, LAN/MAN/WAN

 

Certifications: Prefer - CCDA or CCNA or CISSP or CCSA or GIAC or MCSE or UNIX Cert.

 

Databases: Access or SQLMust have excellent interpersonal skillsMust have excellent written and communication skillsRequires advanced problem determination skillsRequires advanced project management skillsTeam OrientedCollege GraduateTechnical Training