Information Security Engineer

## Position Overview

Pay range: $63,875 - $103,800 / year

Benefits and perks available for eligible positions include: robust educational assistance programs, generous paid time off, employee assistance and wellness programs, paid parental leave, qualifying employer for the Public Service Loan Forgiveness (PSLF) Program, plus more.

## Job Highlights

A team of more than 400 professionals, Health System Information Services (HSIS) works to keep UAB Medicine’s IT systems and infrastructure running smoothly to deliver quality care to our patients. Join our nationally ranked team at UAB Medicine, the No. 1 Best Large Employer in 2021 as ranked by Forbes magazine.

## Job Description

To participate in the planning, design, enforcement and audit of security policies and procedures which safeguard the integrity of and access to enterprise systems, files, and data elements. To recognize and identify potential areas where existing data security policies and procedures require change, or where ones need to be developed, especially regarding future business expansion. To provide management with risk assessments and security briefings to advise them of critical issues that may affect customers, or corporate security objectives. To evaluate and recommend security products, services and/or procedures to enhance productivity and effectiveness.

## Qualifications

Qualifications

Bachelor's degree in Information Systems or a related field and one (1) year of related experience required. Work experience may substitute for education requirement.

Licenses / Certifications / Registrations

Preferred Skills

One of the following certifications preferred:

• Security +
• Network +
• CEH
• SSCP
• GSEC

Experience with 1 or more items outlined below in a Healthcare setting preferred:

• IT Risk Management and Compliance

o Performing risk assessments on vendors, departments, systems and facilities

o Working alongside business/system owners to remediate risk findings

o Following up with vendors where risk items have been identified for remediation

o Working with risk owners to document remediation plans and exceptions

o Mapping risk findings to common controls

• Incident Response, Triage and Threat Hunting

o Work with MSSP to tune and improve security alerts

o Monitor networks and systems: Continuously watch network traffic, system logs, and other data sources for anomalies and signs of intrusion

o Collect intrusion artifacts: Gather relevant data and evidence to understand how an incident occurred and the tactics used by the attacker

o Ability to utilize security tools (SIEM, EDR, Web filter, SOAR, Firewall, etc..) to contain threats

o Hunt for Indicators of Compromise (IOCs) and signs of Advanced Persistent Threats (APTs)

• Identity and Access Management

o Assists in the administration of the user account life cycle, including the creation, updating, modification, and inactivation of user access to UAB Hospital/Medicine/Health devices, networks, and applications

o Performs routine access reviews and audits to ensure user access remains appropriate and compliant with organizational policies, regulatory requirements, and security standards

o Recognizes, enforces, and adheres to established privacy and security policies related to user accounts, identity data, and system access

o Documents IdM processes, workflows, and procedures, and maintains accurate and up to date records

## Why Work at UAB Medicine

We are UAB Medicine, Alabama’s largest and most comprehensive health system, recognized nationally for delivering world-class patient care, pioneering research, and cutting-edge medical education. We proudly serve more than 1.1 million patients each year – from every county in Alabama, all 50 states, and many countries around the world. Our network spans numerous hospitals, emergency departments, more than 67 other sites of care, and a team of over 2,200 physicians. Our key facilities include UAB Hospital – ranked the No. 1 hospital in Alabama by *U.S. News & World Report* and home to the state’s only ACS-verified Level I adult trauma center and Magnet-designated hospital – along with UAB Hospital-Callahan Eye and five UAB St. Vincent’s hospitals serving central Alabama.

UAB Medicine offers careers across a wide range of practice environments, from our internationally renowned academic medical center and award-winning community hospitals to our primary and specialty care clinics across the state. Whether you’re seeking the fast-paced learning environment of a tertiary care setting or the close-knit environment of a community facility, there’s a place for you on our team where you can become part of a mission-driven organization committed to delivering life-changing care. With nearly every medical specialty represented and unlimited opportunities for growth, you’ll find the right fit for your skills and career goals. We care for you by offering comprehensive, industry-leading benefit packages to support the individual preferences and circumstances of our diverse staff.