Under limited supervision, the Cyber Security Engineer is primarily responsible for the enterprise IT security and threat mitigation framework, ensuring the safety of Information System assets.
These responsibilities include: the engineering, implementation and monitoring of security measures for the protection of IT assets, networks and electronic protected data; the design, implementation and management of enterprise security architecture; the documentation of all relevant standard operating procedures and policies; the proper operation of all proactive threat mitigation measures; the remediation of identified vulnerabilities or security events; security incident response and root cause analysis with forensic documentation; security education and training; maintains current knowledge of relevant technology and industry best practice; participates in special projects and other duties as assigned.
As a level II engineer, the position requires the building and integration of solutions and leading of department projects and initiatives as determined by Cyber leadershipEducationBachelor's degree or current high-level IT security / cybersecurity certification.
Associate's degree or mid-level IT security / cybersecurity certification plus 2 years of relevant experience may be considered for individuals with in-depth experience that is clearly related to the positionDegree must be in Computer Science or a related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, Systems Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Healthcare IT, Information Assurance, Information Security, and Information Systems)Relevant experience must be in computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance, and/or systems engineeringExperience2-5 years as a system security engineer or building and maintaining comprehensive IT security systems requiredKnowledge, Skills and AbilitiesAbility to apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)Demonstrated ability to work independently or under only general directionDemonstrate effective written and oral communication skillsExperience with EPIC EMRFamiliar with Vulnerability Management ProcessFamiliar with Security Monitoring & Event ManagementFamiliar with Infrastructure patching management processExperience using Tenable scanning tool, KnowBe4, Citrix NetScalerFamiliar with BIOMED device and patch managementFamiliar with Forcepoint web filteringFamiliar with Mobile Device ManagementProficiency with Active Directory and Microsoft Office Admin 36Requires familiarity with domain structures, user authentication, and digital signaturesRequires understanding of FISMA policies and procedures, including FIPS 199, FIPS 200, NIST HIPAA, -and other applicable policiesKnowledge of network tools (e.g., ping, traceroute, nslookup)Knowledge of encryption methodologiesLicensures,



CertificationsPreference for certifications for EMR security, network security, cybersecurity or digital forensics from EC-Council, CompTIA, SANSIndustry cyber tool certifications considered if relevant to GBMCPatient & Workplace Safety:Employee has knowledge and understanding of patient and workforce safety as it relates to job duties.Patient Population:Demonstrates competency in the delivery of care and applies the knowledge to meet age-specific needs if applicable.Principal Duties and ResponsibilitiesSIEM analysis and configurationBuilding and applying infrastructure, policies, dashboards and alertingIncident ResponseResponds to crises or urgent situations within the pertinent domain to mitigate immediate and potential threats.
Uses mitigation, preparedness, and response and recovery approaches, as needed, to maximize survival of life, preservation of property, and information security.
Investigates and analyzes all relevant response activitiesSystems AccessResponsible for access control, passwords, and account creation and administration and auditingDigital ForensicsCollects, processes, preserves, analyzes, and presents computer-related evidence in support of network vulnerability mitigation and/or criminal, fraud, counterintelligence, or law enforcement investigationsVulnerability Assessment and RemediationVulnerability detection analysis and remediation through SIEM analysisEnsures the integrity and protection of networks, systems, and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devicesEvaluates vulnerabilities and assist with planning and implement remediation proceduresPolicy AdministrationAssist in the creation, auditing and maintenance of policies and procedures in relation to IT and cybersecurityPatch ManagementAssist in the detection, analysis and remediation of security vulnerabilities in systemCybersecurity EducationAbility to prepare and deliver education and awareness briefings to ensure that systems, network, and data users are aware of and adhere to systems security policies and proceduresKnowledge of Cyber Threats/Global TrendsRemain current in knowledge of cyber threats and global trends - Monitor external data sources (e.g., cyber defense vendor sites, Computer Emergency Response Teams, Security Focus) to maintain currency of cyber defense threat condition and determine which security issues may have an impact on the enterpriseDevelop content for cyber defense toolsPerforms Computer Security Incident Response according to industry best practice and assist with RCA and forensic documentationAssist with design, development and implementation of the Cybersecurity Framework policies and proceduresEnsures the integrity and protection of networks, systems,



and applications by technical enforcement of organizational security policies, through monitoring of vulnerability scanning devicesEnsure that cybersecurity-enabled products or other compensating security control technologies reduce identified risk to an acceptable levelMonitor and analyze Intrusion Detection Systems (IDS) to identify security issues for remediationEMR Security SupportPerforms periodic and on-demand system audits and vulnerability assessments, including user accounts, application access, file system and external Web integrity scans to determine complianceAssist with SSL certificate managementAssist with implementing periodic BCA and HA validationLead and/or participate in special projects as requiredAll roles must demonstrate GBMC Values:RespectI will treat everyone with courtesy.
I will foster a healing environment.Treats others with fairness, kindness, and respect for personal dignity and privacyListens and responds appropriately to others' needs, feelings, and capabilitiesExcellenceI will strive for superior performance in every aspect of my work.
I will recognize and celebrate the accomplishments of others.Meets and/or exceeds customer expectationsActively pursues learning and self-developmentPays attention to detail; follows throughAccountabilityI will be professional in the way I act, look and speak.
I will take ownership to solve problems.Sets a positive, professional example for othersTakes ownership of problems and does what is needed to solve themAppropriately plans and utilizes required resources for various job dutiesReports to work regularly and on timeTeamworkI will be engaged and cooperative.
I will keep people informed.Works cooperatively and collaboratively with others for the success of the teamAddresses and resolves conflict in a positive waySeeks out the ideas of others to reach the best solutionsAcknowledges and celebrates the contribution of othersEthical BehaviorI will always act with honesty and integrity.
I will protect the patient.Demonstrates honesty, integrity and good judgmentRespects the cultural, psychosocial, and spiritual needs of patients/families/coworkersResultsI will set goals and measure outcomes that support organizational goals.
I will give and accept help to achieve goals.Embraces change and improvement in the work environmentContinuously seeks to improve the quality of products/servicesDisplays flexibility in dealing with new situations or obstaclesAchieves results on time by focusing on priorities and manages time efficientlyPay Range$79,****** - $143,******Final salary offer will be based on the candidate's qualifications, education, experience and alignment with our organizational needs.Equal Employment OpportunityGBMC HealthCare and its affiliates are Equal Opportunity employers.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity and expression, age, national origin, mental or physical disability, genetic information, veteran status, or any other status protected by federal, state, or local law.
#J-*****-Ljbffr

📌 Cyber Security Engineer Ii (Adelaide)
🏢 GBMC HealthCare
📍 Adelaide