CYBER SECURITY ENGINEER 1

Req #: 233160

Department: UW MEDICINE IT SERVICES

Appointing Department Web Address: http://uwmits_hires.uwmedicine.org/

Job Location Detail:

Primary work location may be fully remote within the US or at the Safeco Plaza Building on the corner of 4th and Madison in downtown Seattle.


Posting Date: 04/10/2024

Closing Info: Open Until Filled

Salary: $6,308 - $8,118 per month

Shift: First Shift

Notes: As an employee you will enjoy generous benefits and work/life programs. For detailed information on Benefits for this position, click here. (https://hr.uw.edu/benefits/wp-content/uploads/sites/3/2018/02/benefits-professional-staff-librarians-academi-staff-20210208.pdf)


UW MEDICINE IT SERVICES

has an outstanding job opportunity for a

CYBER SECURITY ENGINEER 1

position.


WORK SCHEDULE

• 100% FTE – 40 hours per week
• Day Shift – UW MEDICINE ITS SERVICES CORE HOURS ARE 07:00 – 16:00 (PST), Monday-Friday POSITION HIGHLIGHTS
• Collaborating with fellow Cyber Security Engineers and Analysts to conduct vulnerability assessments, threat intelligence, and incident response activities across UW Medicine, with our partner organizations, and vendors.
• Supporting the design, development, and implementation of security tools and configuration baselines, drawing from industry requirements and frameworks such as HIPAA, HITRUST, and NIST.
• Executing incident response activities and conducting digital forensics investigations on UW Medicine assets, including reporting.
• Configuring various scans, engaging with system owners for resolution, processing false-positives, and assisting with risk acceptance.
• Utilizing a variety of threat sources including raw data, log information, reports and bulletins, and collaborations with both internal and external partners to develop threat profiles for UW Medicine information assets. DEPARTMENT DESCRIPTION UW Medicine IT Services (ITS) is a shared services organization that supports all of UW Medicine. UW Medicine is comprised of Harborview Medical Center (HMC), UW Medical Center-Montlake Campus (UWMC-Montlake), UW Medical Center-Northwest Campus (UWMC-NW), Valley Medical Center (VMC), UW Neighborhood Clinics (UWNC), UW Physicians (UWP), UW School of Medicine (SOM), and Airlift Northwest (ALNW). In addition, UW Medicine shares in the ownership and governance of Children’s University Medical Group and Seattle Cancer Care Alliance (a partnership between UW Medicine, Fred Hutchinson Cancer Research, and Seattle Children’s). ITS is responsible for the ongoing support and maintenance of the infrastructure and applications which support all these institutions, along with the implementation of new services and applications that are used to support and further the UW Medicine mission.
  
  
  
  

PRIMARY JOB RESPONSIBILITIES

• You engineer, configure, test, and implement information security products and solutions.
• You respond to cyber-security intrusions and conduct digital forensic analysis, investigations, and investigative reporting, as needed.
• You define and develop reporting and post-event follow-up activities related to information security incidents.
• You maintain awareness of known and emergent vulnerabilities related to UW Medicine's technology deployments and use and convert insights into actionable use cases and detection methodologies.
• You deliver security consulting and technical services to technical, hospital, business, operations, and vendor staff and teams concerning implementation of UW Medicine security standards, processes, and NIST 800-53 “best practices” on secure system design and risk mitigation strategies.
• You advise the enterprise on the secure design of technical solutions, applications, and network architecture.
• You deploy approved security tools in accordance with formal policies and procedures to assess the vulnerability of the UW Medicine workforce and/or assets to general and specific threats.
• You review security controls, information systems, and business practices for violations of information security policies, standards, or regulatory requirements.
• You support team efforts to document and report information security risks to UW Medicine.
• You participate in all aspects of improving the team, including education/training of other team members and contributing to process/communication improvement initiatives. REQUIRED QUALIFICATIONS
• Bachelor’s degree in Computer Science, Information Technology, Engineering, or a related field or equivalent education and/or experience.
• 2+ years’ of overall experience to include the below.
• 2+ years’ information security experience to include experience in one or more of the following areas: Security Engineering, Security Operations, Security Analysis, Security Architecture, implementing security best practices, tools, and technologies.
• Demonstrated independent work experience with security tool design implementation, or maintenance of security tools, including threat management, vulnerability management, or incident response platforms.
• Demonstrated work experience independently performing security assessments, security control analyses, vulnerability assessments, or penetration tests.
• Demonstrated independent work experience with security-related technologies, systems, and tools used for the protection of computer networks and information.
• Demonstrated understanding of information security threats and vulnerabilities and how they translate to risks.
• Foundational understanding of security monitoring tools to review and analyze operating system outputs such as authentication logs.
• Able to reference one or more common information security regulations and/or standards such as NIST 800-53/CSF, ISO 27001/2, HIPAA, PCI DSS, and SOC when analyzing risks.
• Demonstrated knowledge with major operating systems including Windows, Mac OS, Linux, and Mobile Platforms.
• Foundational understanding of risk management concepts, methodologies, metrics, and reporting. CONDITIONS OF EMPLOYMENT
• This is an Information Technology deadline-driven work environment.
• The individual in this position is expected to work normal daytime hours. The work may be performed in either an office environment or by telecommuting with manager approval, during normal business hours; however, significant off-hours and weekends may be needed to resolve problems and respond to emergencies. This individual is expected to be available for emergencies (business continuity/disaster recovery efforts) on a 24x7 basis as needed.
• Must coordinate projects without direct supervisory authority.
• Must work within the constraints of multiple technical environments.
• The individual in this position must learn many organizational structures and cultures and continually foster collaboration.
• Ability to communicate effectively in English, both verbally and in writing. ABOUT UW MEDICINE - A HIGHER DEGREE OF HEALTHCARE UW Medicine is Washington’s only health system that includes a top-rated medical school and an internationally recognized research center. UW Medicine’s mission is to improve the health of the public by advancing medical knowledge, providing outstanding primary and specialty care to the people of the region, and preparing tomorrow’s physicians, scientists, and other health professionals.
  
  

All across UW Medicine, our employees collaborate to perform the highest quality work with integrity and compassion and to create a respectful, welcoming environment where every patient, family, student, and colleague is valued and honored. Nearly 29,000 healthcare professionals, researchers, and educators work in the UW Medicine family of organizations that includes: Harborview Medical Center, UW Medical Center - Montlake, UW Medical Center - Northwest, Valley Medical Center, UW Medicine Primary Care, UW Physicians, UW School of Medicine, and Airlift Northwest.

Become part of our team . Join our mission to make life healthier for everyone in our community. #monster

University of Washington is an affirmative action and equal opportunity employer. All qualified applicants will receive consideration for employment without regard to, among other things, race, religion, color, national origin, sexual orientation, gender identity, sex, age, protected veteran or disabled status, or genetic information.