Security Engineer

Security Engineer
SPHS-Info Tech-General

The Security Engineer will be responsible for designing, implementing, and maintaining security measures to protect the hospital's information systems, networks, and data. This role requires a deep understanding of cybersecurity principles, healthcare regulations, and the ability to respond to security incidents effectively.

• Designs, implements, and maintains security infrastructure, including firewalls, intrusion detection/prevention systems, and encryption protocols.
• Conducts regular security assessments, vulnerability scans, and penetration tests to identify and mitigate potential threats.
• Monitors and analyzes security alerts and logs to detect and respond to security incidents promptly.
• Develops and enforces security policies, procedures, and best practices to ensure compliance with healthcare regulations (e.g., HIPAA).Collaborates with IT and other departments to ensure the secure integration of new technologies and systems.
• Provides security awareness training and guidance to hospital staff to promote a culture of security.
• Investigates and responds to security breaches, incidents, and anomalies, and develop strategies to prevent future occurrences.
• Stay updated with the latest cybersecurity trends, threats, and technologies to improve the hospital's security posture continuously.

Requirements:

• Bachelor's degree in computer science, Information Security, or a related field preferred.
• 2-5 years of relevant experience preferred.
• Professional certifications such as CISSP, CISM, or CEH is highly desirable.
• Proven experience in a security engineering role, preferably in a healthcare environment.
• Strong knowledge of cybersecurity principles, network security, and encryption technologies.
• Familiarity with healthcare regulations and standards (e.g., HIPAA, HITECH).
• Excellent problem-solving skills and the ability to work under pressure.
• Strong communication and interpersonal skills to effectively collaborate with cross-functional teams.
• Experience with security information and event management (SIEM) systems.
• Knowledge of cloud security and experience with securing cloud-based applications and services.
• Understanding medical device security and the unique challenges of securing healthcare environments.

Grade 131