Bachelor's degree in Information Systems or a related field and six (6) years of related experience required. Work experience may substitute for education requirement. Certified Information Systems Security Professional (CISSP) certification preferred.

PREFERRED SKILLS:

One of the following certifications preferred:

• CISSP

• CCNA

• CEH, OSCP, GPEN

Experience with 2 or more of the items outlined below in a Healthcare setting preferred:

• IoT Risk management

o Maintaining passive scanners to discover IoT and biomedical devices on the network

o Referencing MDS2 documents from vendors to determine risk

o Providing remediation plans for biomedical device vulnerabilities

• Provide Biomed with architecture guidance on implementation of medical devices
• Contribute to maintaining medical device asset inventory and associated collection of security information

• Cloud Security

o Azure Defender Policies (needed for Onedrive, Teams, and SharePoint)

o AIP (Azure Information Protection) Policies

o CASB Policy (MCAS – Microsoft’s native CASB, SASE or API integrations)

o Logging (Azure Event Hub, Syslog, Sentinel, etc…)

o Zero Trust Framework

o Managing application security scanners (DAST, SAST)

• Network Security

o Working knowledge of TCP/IP, HTTP, SSL, SSH and other networking protocols

o Managing network security tools such as IPS, Firewall, SASE, etc….

o Reviewing firewall requests to determine risk to organization

o Managing network configuration tools such as (tufin, redseal, voyance, etc…)