Cyber Security Engineer

Join to apply for the Cyber Security Engineer role at Colorado Access

Join to apply for the Cyber Security Engineer role at Colorado Access

Why should you consider a career with Colorado Access?

We are a Colorado-based company, working to improve the health of our state. We care for individuals, families, and children who receive health care under Child Health Plan Plus (CHP+) and Health First Colorado (Colorado's Medicaid Program). Our focus is driving improvements in quality, member experience, outcomes, and cost. We are a mission-driven organization whose foundation is built by our vision, supported by our values and pillared by diversity, equity and inclusion.

• Find work/life balance: We offer PTO, floating holidays, nine company paid holidays, a hybrid work environment, an Employee Assistance Program and a 401K.
• Be a part of something bigger and make an impact:
  We serve the underserved and most vulnerable populations in our community through access to quality and affordable health care. No matter what you do for Colorado Access, you are impacting our community and making a difference.
• Sharpen your skills, learn, and grow:
  We support your continued development through tuition reimbursement, leadership training, promotion opportunities, performance evaluations, employee recognition, and a language pay stipend.

What you will do:

We are looking for a
CYBER SECURITY ENGINEER
who can help shape our vision and support our mission. Here is what the position will look like.

• Provides expert judgment and analysis that contributes to the design, development and implementation of technical countermeasures, systems, and tools specific to unique HIPAA. environments, Cyber Information Operations, and Intelligence needs.
• Perform malware analysis and digital forensics as needed.
• Stays current with emerging threats, vulnerabilities, and regulatory changes.
• Actively discovers, analyzes, diagnoses and reports on malware events, files, and network intrusion and vulnerability issues.
• Provide Tier 2 support for escalated security incidents and assist in root cause analysis.
• Participate in audits and assessments to ensure compliance with HIPAA, NIST, and internal standards.
• Works and directs cross functional teams to deploy security tools and controls across the corporation.
• Develop strategies and plans to respond to and recover from a security breach, including investigation in the event of a security breach.
• Develops and implements tools to assist in detection, prevention and analysis of security threats.
• Provides workforce awareness training on information security standards, policies and best practices.

What you will bring:

Education
:
Bachelor’s degree in an Information Technology field required. An equivalent combination of experience and/or education may substitute with a preference for six years of progressive relevant work experience.

Experience
:
Minimum of five years’ experience in a cyber security position. Network engineering experience preferred. Healthcare experience preferred with experience or knowledge of HIPAA.

Knowledge, Skills, and Abilities
:
Demonstrates support for the company’s mission, vision and values. Strong vulnerability management and compliance skills. Advanced knowledge and expertise in anti-virus software, intrusion detection, firewalls and content filtering. Experience and expertise in using Tenable Security Center and Tenable.io. Knowledge of risk assessment tools, technologies and methods. Understanding of PCI-DSS 2.0, FISMA/CMS/NIST 800-53a, EHNAC, SOX and HIPAA. Expertise in designing secure networks, systems and application architectures, disaster recovery, computer forensic tools, technologies and methods.

Strong research, planning and development skills to develop and implement security policies, standards and procedures. Strong system administration knowledge to support multiple platforms and applications. Expertise with mobile code, malicious code, and anti-virus software. Endpoint security solutions, including file integrity monitoring and data loss prevention. Experience working with cloud deployments in Azure and related cloud security and automating security testing tools.

Position…