Sr. Security Operations Engineer

This position is for a motivated and highly-skilled senior-level Security Engineer, who exhibits a passion for security and a desire to innovate. Sr. Security Engineers own ingesting and processing data from the full range of logs, telemetry and sensor alerts, creation of detection mechanisms of behavioral anomalies, and threat intelligence to produce actionable security insight to mitigate risk.  This Sr. Security Engineer will be performing daily system monitoring and troubleshooting, which includes verifying the integrity and availability of cloud infrastructure, server resources, systems and key processes, reviewing system and application logs, and verifying completion of scheduled jobs. 

Why is this role important to Ruvos
Ruvos strives to be a positive contributor in public health, specifically informatics. Our daily accomplishments align with our company mission statement: “We’re on a mission to deliver clever and efficient solutions to problems so that the world is a better place for the communities we serve.”

The services Ruvos provides are: project management, software engineering/development, data integration, security and system operations, development operations, and data science. Each role should contribute to Ruvos’ reputation of taking on complex problems and evolving each service to meet the goals of our customers.

Public health informatics is undergoing a substantial change following COVID-19, and Ruvos expects to grow and add new team members in a responsible way as a result. Our company's financial success depends on quality, on-time delivery of services which leads to new opportunities. Each role in the organization will contribute to supporting new customers and new initiatives from existing customers.

Job Responsibilities

• Lead architect of network perimeter security using appliance firewalls and AWS Services

• Compliance scanning based off of NIST-800-53 guidelines

• Vulnerability scanning and remediation

• CVE scanning of applications

• Analyze and monitor host and network intrusion detection systems

• Administer and configure file integrity monitoring solutions

• Maintain and configure centrally managed antivirus

• AWS Services specifically Security, Compute, Storage, Database, Networking, and Containers

• Deployment and design of EC2 hardened images

• Troubleshoot, diagnose, and resolve software, hardware, and other network and system issues

• Perform application upgrades on various systems

• Collaborate with product owners to ensure highly available security solutions

• Perform OS upgrades leveraging automations where applicable

• Develop automations for AWS operational tasks 

• Infrastructure monitoring using AWS CloudWatch and CheckMK

• Participate in an on-call rotation for production support

• Documenting current environment and ongoing maintenance of documentation

• General understanding of successful public health informatics solutions

• Efficient communication of changes and completions

• Provide daily/weekly updates in Jira

• Manage Jira tickets for assigned projects

• Attend organizational meetings (daily/weekly)

• Be a trusted advisor and consultant to our customers

Required Job Skills

• 5 Years of Network Security experience

• 5 Years of Security Information and Event Management (SIEM)

• 5 Years of AWS Experience in Security, Compute, Storage, Database, Networking

• 5 Years of Cloud infrastructure architectural design

• 5 Years of Linux and Windows administration

• OWASP security principles

• Scripting languages such as Bash, Python

• Rapid7

• Atlassian JIRA and Confluence

• Excellent time management skills and ability to multi-task and prioritize work

• Proficient in AWS services

• Knowledge of security software or firewall

• Attention to detail and problem solving skills

• Excellent written and verbal communication skills

• Strong organizational and planning skills

• Proficient in GSuite

Classification

This role is full-time and, in accordance with FLSA, is classified as Exempt. An exempt employee is salaried and is not eligible to receive overtime pay, and is also excluded from minimum wage requirements.