Job details
Job type full-time
Full job description
See how you can make a difference! be part of an innovative company that cares about its associates and helps members enjoy the wonders of sight through healthy eyes and vision.
Versant health provides vision care to 37 million members nationwide! to ensure your continued success we provide opportunities for advancement and development.
Our associates remain engaged through a comprehensive compensation and benefits package which includes health and dental insurance, tuition reimbursements, 401(k) with company match, pet insurance and free vision insurance for you and your family
Scope and purpose of position
The security engineer is an expert in multiple security technologies and has primary responsibility for security excellence for the enterpriseThe security engineer works collaboratively with security and it staff to design and execute security controls around the enterprise it environment, interconnectivity with 3rd parties, and cloud environments
Essential functions
Design and implement it security controls
Ensure seamless integration between cloud, 3rd party connectivity, and on-premises security posture & tools
Investigate, resolve, and/or escalate network and hardware matters of significance
Design, test, implement, and manage mobile device management (mdm) security platform
Design, test, implement, and manage data loss prevention (dlp) solutions
Evaluate and advise on security considerations of organizational tools and design controls to mitigate risks posed by these tools as needed
Document security controls and assist in defining system, network, and cloud-attack surface
Design, manage, and implement controls around microsoft o365, azure ad, sharepoint online, one drive, dlp, waf, edr, proxy, and web monitoring solutions, etc.
Investigate, resolve and/or escalate it security matters of significance
Research, analyze, and isolate errors; assists in implementing controls around infrastructure and cloud migration to more secure environments
Participate in project design and modeling activities, development, and cross-training of it resources for successful long-term integration of technologies
Serve as primary escalation point for it security issues, answer routine technical questions, and recommend and implements approved course of action
Follow change control procedures
Evaluate it security technologies for security implications and recommend approve/modify/deny courses of action based on organization security and compliance ramifications
Work with security architects to developing it security frameworks for the enterprise
Lead it security tool usage strategy, monitoring, alerting, reporting, and blocking
Provided architectural and security guidance for azure based secure file transport system (sfts)
Examine current it security practices and identify key risks; execute programs to address them
Up to 10% travel may be required
Education and experience
Preferred bachelor`s degree in computer science or related technology or engineering fields or equivalent combination or experience and education
Five (5) years of related experience
Dlp, atp, encryption, tls, archive, discovery, risk mitigation, security-focused design, and supporting policy development.
Knowledge and experience in the insurance, health, or vision care industry preferred
Experience in designing solutions that are guided by and compliant with industry standard audit and compliance standards such as sarbanes oxley, pci, hitrust, socii and hippaIn depth experience with tcp/ip related protocols, ip routing protocols, and firewall technologies
Experience working in a large enterprise environment, including a minimum of five (5) years of microsoft o365 experience
Creation and management of sharepoint farms including project server, system center environment (sccm, scom, scsm), multiple sql instances, identity lifecycle manager, hyper-v, vmware environments with srm and vrealize, horizon view, and numerous other application platforms
Hipaa & security requirements
All associates must comply with the health insurance portability accountability act of 1996 (hipaa) as it pertains to disclosures of protected health information (phi) as described in the notice of privacy practices and hipaa privacy policies and proceduresAs a component of job roles and responsibilities, associates may have access to covered information, cardholder data or other confidential customer information which must be protected at all timesAs a result, associates must explicitly adhere to all data security guidelines established within the company’s privacy & security training program.
We take pride in our recruiting process and follow a merit-based employee recruitment practice with extensive screening stepsWe will never request money from candidates who seek employment with us and will never ask for any payment as part of the recruitment process.
We provide equal employment opportunities (eeo) to all associates and applicants for employment without regard to race, color, religious beliefs, age, sex (including pregnancy), sexual orientation, gender identity or expression (including transgender status), national origin, ancestry, status as a protected veteran or disabled veteran, physical or mental disability or history of disability, genetic information, marital status, or any and all other categories protected by under applicable federal, state or local law.
This policy extends to all associates and to all aspects of the employment relationshipAny associate who violates this policy will be subject to disciplinary action up to and including termination.