Job Description

The Information Security Engineer I role assists in developing, implementing and maintaining corporate information security standards, technologies, processes and procedures.

The Information Security Engineer coordinates, administers, monitors and maintains security infrastructure. This includes but is not limited to network security systems, endpoints, identity and access management (IAM) solutions, security information and event monitoring (SIEM) system logging and analysis, application security, threat intelligence, forensics, anti-malware and vulnerability assessment programs.

Core responsibilities

• Rigorously maintain security systems and administer security configurations that reduce risk to enterprise systems.
• Maintain vulnerability management standards across all operating systems, software applications and hardware configurations.
• Administer and maintain security systems, including firewalls, network and host intrusion prevention/detection systems (IPS/IDS), virtual private networks (VPNs), SIEM systems, threat intelligence platforms, endpoint protection, email security, forensic tools, public/private/hybrid cloud infrastructure and IAM systems.
• Improve efficiencies using automation and orchestration solutions to reduce manual work that can be done programmatically.
• Serve as a team lead and point of contact for 3rd party incident response analysts, security operations center (SOC) analysts, application engineers and security management.
• Perform research and provide insight when requested with regard to tactical and strategic decisions.
• Create and maintain security documentation and configuration practices as directed.
• Protect systems by defining access privileges, control structures and resources.
• Attend and engage in all change and project management meetings as requested.
• Liaison with auditors, both internal and external, to maintain and implement controls for compliance and privacy laws.
• Administer best practices and required configuration standards for compliance and privacy law obligations.
• Remain current with new security threats and assessing systems to ensure they can defend the business.
• Provide rigorous administrator and configuration settings for third parties.
• Act as a point of contact for disaster recovery and business continuity.
• Perform other duties as assigned.

Our Commitment to Employees:

Come work at Rothman Orthopaedics! Our employees are our single greatest asset, as such, we strive to provide a professional, nurturing environment where every member of our team can make a meaningful difference in the lives of others. This commitment to our employees has earned us the distinction as a Top Workplace in Philadelphia by the Philadelphia Inquirer year after year. Our employees enjoy competitive pay, comprehensive health and dental benefits, tuition reimbursement, paid time off, and retirement savings plans.

Rothman Orthopaedics is an Equal Opportunity employer committed to providing opportunities to all qualified applicants without regards to sex, gender identity, sexual orientation, race, color, religion, national origin, disability, protected veteran status, age, or any other characteristic protected by law. We value developing an inclusive and equitable environment that strengthens our organization and allows us to better attract and retain a diverse workforce that is representative of our patients and our community. We model our values by creating and enacting practices that encourage participation from all backgrounds, perspectives, and experiences.

As a condition of employment at Rothman Orthopaedics, it is required you receive the COVID-19 vaccination. Rothman Orthopaedics is an Equal Opportunity Employer and requests for reasonable accommodations will be considered.

Qualifications

Minimum requirements:

• The Mid-Level Information Security Engineer generally has 3-5 years of experience.
• Mastery of basic and routine tasks
• Works independently
• Produces consistent continued positive trends in results and overall performance.
• Proactively identifies, analyzes and resolves daily procedural or programmatic problems with internal clients on broader range of systems/technology areas.
• Increase in technical expertise & ability across most widely applicable systems/technology areas; remains current for these and with organization systems modifications.
• Demonstrates capability to adapt and learn through results.
• Good working knowledge of the organization business processes; evidence of strong positive internal network of relationships & information.