Cybersecurity Engineer I

As a Cybersecurity Engineer I, you will be part of an Enterprise-wide Cybersecurity Engineering team responsible for Identity and Access Management (IAM), tasked with the planning, implementation, and support of the Enterprise IAM Platform. Expertise should include Feature Development and Deployment, Access Certifications, Provisioning, Modeling, Workflows & Automation., This impactful position will be responsible for the design, deployment, configuration, and maintenance of an IAM platform in a multi-state enterprise environment. Candidates should have experience with various programming and development platforms including Git, Java, JavaScript, PowerShell, SQL, and Agile project management methodologies. They should also have a solid understanding of Identity Access Management and Identity Governance tools, preferably with SailPoint’s IdentityIQ, IdentityNow, or similar. Candidates should also understand IAM best practices that will drive maturity and adoption of the platform across the enterprise. This is a remote position. In this role you would work Monday through Friday normal business with on-call support. This is a remote position only if you live in the following states only: AL, AK, AR, AZ, CA, CO, FL, GA, IA, ID, IN, KS, KY, LA, MD, MI, MN, MO, MS, NC, ND, NE, NH, NM, NV, NY, OH, OK, OR, PA, SC, TN, TX, UT, VA, WA, WI, WV & WY. NO other states will be considered.

Your pay and benefits (Total Rewards) are important components of your Journey at Banner Health. Banner Health offers a variety of benefit plans to help you and your family. We provide health and financial security options, so you can focus on being the best at what you do and enjoying your life.

Within Banner Health Corporate, you will have the opportunity to apply your unique experience and expertise in support of a nationally-recognized healthcare leader. We offer stimulating and rewarding careers in a wide array of disciplines. Whether your background is in Human Resources, Finance, Information Technology, Legal, Managed Care Programs or Public Relations, you’ll find many options for contributing to our award-winning patient care., This position designs, develops, configures, implements, tunes, maintains solutions, resolve technical and business issues related to cybersecurity threat & vulnerability management, identity management, security operations center, forensics, and data protection. Cybersecurity Engineers work with Cybersecurity Architects to execute strategic cyber initiatives, evaluate security components of the network, applications and end-user devices, and provides guidance to ensure new systems meet regulatory and technical standards. Cybersecurity Engineers participate in root-cause analysis efforts to determine improvement opportunities when failures occur. Manage Cyber systems, ensures they are tuned, on the current release and manages appropriate change management across the IT organization and the business.

CORE FUNCTIONS

1. Participates in the design and implementation of cybersecurity solutions.

2. Participates in providing technical expertise and support for cybersecurity solutions, including operational aspects of the software.

3. Participates in the design, implementation, and compliance of secure baseline configurations for applications and infrastructure components.

4. Performs technical assessments of systems and applications to ensure compliance with policy, standards and regulations.

5. Participates in the ongoing evaluation and development of security policies and procedures. Leads the revision of policies and procedures, as needed.

6. Update, sustain, and administer a high level of security for in-house security infrastructures and services.

7. Participates in cybersecurity projects, including the development of project scope requirements, budgeting, work breakdown.

8. Under general direction, this position is responsible for cybersecurity across multiple departments system-wide and requires interaction at all levels of staff and management.

Must possess strong knowledge of business, information security and/or computer science as normally obtained through the completion of a bachelor’s degree in Computer Science, Information Security, Information Systems, or a related field.

0-3 years of experience of enterprise-scale information security engineering, preferably in healthcare. Experience with IT operations and or Security operations is also highly desirable. Experience with automation of security processes, coding and scripting languages. Ability to perform acquisition process, including vendor selection, define requirements, contractual documentation development. Ability to document security processes as well as Use case development. Proficient understanding of regulatory and compliance mandates, including but not limited to HIPAA, HITECH, PCI, Sarbanes-Oxley. Experienced assessing and reaching out to vendors for needed features via enhancement requests. Experienced in planning, designing and implementing cybersecurity solutions. Experienced in operating, maintaining and the lifecycle of cybersecurity solutions. Knowledge of Security Engineering Principles, including risk management, resilience, vulnerability management, Information Security, and security operations. Requires independent judgment, critical decision making, excellent analytical skills, with excellent verbal and written communications. Ability to think quickly under difficult or complex conditions and clearly communicate to appropriate staff; ability to balance project workloads with customer support and on-call demands. Must demonstrate general knowledge of information technology and information security principles and practices. Requires communication and presentation skills to engage technical and non-technical audiences. Requires ability to communicate and interact across facilities and at various levels. As is typical in this industry, variable shifts and hours and responding to after-hours notifications may be required., Certification in one(1)of the following areas Systems Security Certified Practitioner (SSCP), HealthCare Information Security & Privacy Practitioner, (HCISPP), CompTIA Security+, Certified Information Systems Security Professional (CISSP) - Engineering (ISSEP), Certified Ethical Hacker (CEH), SANS GIAC, or Certified Information Systems Auditor (CISA). Two years as a System Administrator, Security operations or in IT Operations. Or two years risk management or GRC experience in the healthcare/medical environment.

Additional related education and/or experience preferred.

$37.14 - $61.90 / hour Banner Health is committed to pay equity and transparency. The posted compensation range is a reasonable estimate that extends from the lowest to the highest pay Banner Health in good faith believes it might pay for this particular job, based on the circumstances at the time of posting. This range is based on possible base salaries and does not include the value of our total rewards package. Actual pay determined at offer will be based on years of relevant work experience, education, certifications, skills, and geographic location, along with a review of current employees in similar roles to ensure pay equity is achieved and maintained.

Health care is constantly changing, and at Banner Health, we are at the front of that change. We are leading health care to make the experience the best it can be. We want to change the lives of those in our care - and the people who choose to take on this challenge. If changing health care for the better sounds like something you want to be part of, we want to hear from you.