Note: The job is a remote job and is open to candidates in USA. NantHealth, through its AirStrip division, builds technology that enables clinicians to diagnose earlier and save lives. They are seeking a Lead Security Engineer to design and implement enterprise security architecture, partner with engineering teams, and enhance security practices within the organization.
Responsibilities
- Design and implement robust security architectures
- Act as a mentor and escalation point to other members of the team
- Iterate security posture to better protect against attacks and detect new vectors
- Participate in efforts to mitigate and investigate security incidents
- Evaluate and test new vendor and in house network initiatives for security issues
- Evangelize security practices through cross functional work with engineering teams throughout the enterprise
- Safeguard the enterprise through active operation and defense of critical infrastructure
Skills
- Bachelor's degree in Comp Sciences, Mgmt Info Systems, Cyber Security, Engineering and related fields (commensurate experience will be considered in lieu of degree)
- Minimum 8 years of experience in IT (information technology)
- Minimum 5 years of experience in cyber security / IT security
- Knowledge of securing AWS, Azure or similar cloud environments
- Excellent documentation practices
- Perform vulnerability management, coordinating with other teams to resolve findings
- Knowledge of compliance frameworks: ISO 27001, NIST, HIPAA, HITRUST
- Experience researching, building, and implementing defensive security systems that are used against internal and external attack vectors
- Experience designing and building out application and network security monitoring to aid in detection or forensic investigations
- Background in intrusion detection, security investigations, and incident response
- Deep understanding of MITRE ATT&CK Framework and associated threat actor techniques
- Experience 'threat hunting', i.e. using threat intel to proactively and iteratively investigate these potential risks and finding suspicious behavior in the environment
- Experience investigating data for anomalies in order to identify suspicious behavior
- Experience with Identity and Access Management (IAM), provisioning user accounts and access
- Solid understanding of SIEM tools (LogRhythm, Splunk, Etc.)
- IT Certifications a plus: CISSP, CISA, CompTIA, GIAC
Benefits
- Robust medical, dental, and vision insurance
- Financial planning assistance
- Physical and mental wellness discounts
- Unlimited access to our online learning platform
- Paid Time Off (hourly) / Flex Time Off (salaried) programs for Full Time employees
- Growth and Development opportunities
- 401(k), including a 3% company match
- Paid Holidays
- Paid Parental Leave, including a flexible return-to-work program
- Employee Assistance Program
- Discounts on popular cell phone plan providers
- Life & Disability Insurance
Company Overview
Company H1B Sponsorship