Cisa Cybersecurity Jobs

1 job found

Today

Sr IT Security Engineer

American Medical Association Chicago, IL 🇺🇸 Remote

Chicago, IL

Today

$116k - $151k/yr Full time Application Security Cisa Cism

Apply Now

Job Description

Remote Sr IT Security Engineer role with AMA’s Infrastructure Ops team focused on cyber threat intelligence, security platforms, and day-to-day security operations.

Responsibilities

Research, design, and advocate new security technologies, architectures, and products to support enterprise and customer/vendor security requirements
Plan, document, and execute enterprise-wide security programs, including vulnerability identification and testing and a network scanning framework for public and private networks
Configure and troubleshoot vulnerability assessment tools and endpoint solutions; run scans and research threats; summarize findings and corrective actions as appropriate
Partner with IT, compliance, audit, and others to ensure application and infrastructure development, implementation, and administration meet IT security and regulatory audit compliance standards
Communicate IT Security policies and procedures to management and end users across businesses
Collect and analyze defined security metrics, including security dashboards and training results, for leadership reporting
Develop and deliver information security awareness training, including phishing simulations and risk-based training content for high-risk users
Identify, collect, and organize credible intelligence and subject matter relevant to current and emerging threats using available tools, applications, and open-source information
Define and document application security standards for developers and ensure compliance with applicable security controls when those standards are used
Design, lead, and project manage development and configuration of security tools and automation based on specific use cases
Proactively monitor, analyze, block, and respond to malware and emerging threats; act as technical point of contact during and after security incidents, including digital forensics procedures
Conduct operational threat hunting exercises to proactively find incidents within the AMA environment
Perform threat modeling and risk assessments using standard security frameworks for cloud services
Monitor and audit on-premise and cloud networks and systems, including service changes
Document incident response procedures and support management communications during incidents
Assist in managing security services providers
Research new threats, attacks, and risks to infrastructure and software
Define and document operating procedures for incident identification, investigation, and response
Work with business teams to identify and address data security risks in business processes
Analyze and recommend actions to improve security posture across cloud and hybrid environments and related services/configurations
Improve security reporting by coordinating vulnerability management, penetration testing, and infrastructure compliance
Create or update detailed operational processes and procedures covering security operations, incident management, and code development

Requirements

Bachelor’s degree in Information Security, Engineering, Computer Science, or related field
Demonstrated progression toward one or more security certifications: GIAC Certified Incident Handler (GCIH), GIAC Certified Intrusion Analyst (GCIA), CISSP/CISA, or CISM
5+ years of Security Operations experience, including cyber incident investigations
Strong understanding of network and host-based security applications and tools
Exposure to enterprise web application programming and Application Security (AppSec)
Knowledge of browser security controls, web application security frameworks, and authentication infrastructures (SAML, OAUTH)
Knowledge of technical infrastructure, endpoints, networks, databases, and systems as related to IT security and IT risk
Understanding of cloud networking concepts and architecture to promote and develop cloud security designs and strategies (IaaS, PaaS, SaaS)
Excellent written and verbal communication skills, including communicating technical concepts to business leaders and users clearly and with appropriate urgency/priority
Ability to respond to security incidents promptly and independently under time pressure
Excellent analytical, organizational, and communication skills; demonstrated ability to facilitate cross-functional teams
Experience with continuous improvements and agile methodology

Technologies

firewalls
SIEM
data loss prevention
web application firewalls
application security testing
VPN
SAML
OAUTH
GIAC Certified Incident Handler (GCIH)
GIAC Certified Intrusion Analyst (GCIA)
CISSP
CISA
CISM
CISSP/CISA

Location: Chicago, IL (remote)

Salary: USD 115,523 - 150,972 per year

View full job page →

Get Cisa Cybersecurity Jobs alerts

New Cisa Cybersecurity Jobs, daily.