Cybersecurity Systems Engineer I

Summa Health System is recognized as one of the region’s top employers by a number of third party organizations, including NorthCoast 99. Exceptional candidates gravitate to Summa because of its culture, passion for delivering excellent service to our patients and families commitment to our philosophy of servant leadership, collegial working relationships at every level of the organization and competitive pay and benefits.

Summary:
The Cybersecurity Systems Engineer I (Associate) manages the organization's technical security capabilities to ensure the security and resilience of systems, services, and critical resources. Implements the appropriate processes and technical safeguards to ensure the delivery of critical infrastructure services. To achieve this goal, implements, deploys, maintains, reviews, and administers the cybersecurity hardware, software, and documentation required to effectively manage cybersecurity resources and achieve organizational cybersecurity goals. Manages the organization’s system security capabilities including endpoint, cloud, and data security tools and services. Works in close partnership with peers and other subject matter experts across the organization to achieve desired outcomes.

Minimum Qualifications:

1. Formal Education Required:
a. Associate’s Degree in Computer Science, Cybersecurity, IT, or Engineering or equivalent combination of education and/or experience.

2. Experience & Training Required:
a. Three (3) years information security experience; Three (3) years of IT related experience
b. Preferred experience in a healthcare environment with exposure to HIPAA, PCI DSS, or other relevant regulations.
c. Certifications required:
i. CompTIA Security (or equivalent)
d. Certifications preferred:
i. ITIL Foundation (or equivalent)
ii. ISC2 CCSP, SSCP, CISSP (or equivalent)
iii. GIAC Certifications
iv. CompTIA CASP

3. Other Skills, Competencies and Qualifications:
a. Basic knowledge of information assurance (IA) principles and organizational requirements to protect confidentiality, integrity, availability, authenticity, and non-repudiation of information and data.
b. Basic knowledge of computer networking concepts and protocols, and network security methodologies.
c. Basic knowledge of confidentiality, integrity, and availability requirements.
d. Basic knowledge of network protocols and directory services (e.g., Domain Name System [DNS]).
e. Basic knowledge of installation, integration, and optimization of system components.
f. Basic knowledge of host and network access control mechanisms (e.g., access control list); Intrusion Detection System (IDS) tools and applications; incident response and handling methodologies.
g. Basic knowledge of the systems engineering process.
h. Basic knowledge of user authentication methods and factors.
i. Basic knowledge of secure configuration management techniques.
j. Basic knowledge of security system design tools, methods, and techniques.
k. Basic knowledge of cyber threats and vulnerabilities.
l. Basic knowledge of web filtering technologies.
m. Basic knowledge of operating systems.
n. Basic knowledge of laws, regulations, policies, and ethics as they relate to cybersecurity (e.g., Personally Identifiable Information (PII) and Personal Health Information (PHI)).
o. Ability to optimize systems to meet organizational cybersecurity requirements.
p. Ability to think strategically and creatively to solve complex security problems.
q. Ability to stay up to date on emerging security threats and technologies.
r. Ability to communicate effectively with technical and non-technical audiences.
s. Ability to take direction and operate independently in well-defined situations.
t. Ability to effectively interact with populations of patients/customers with an understanding of their needs for self-respect and dignity.

4. Level of Physical Demands:
a. Sedentary: Exerts up to ten pounds of force occasionally and/or a negligible amount of force frequently.
b. Minimal, may occasionally move computer equipment (desktop, laptop, monitor, printer, and peripherals) when necessary.