Technology Consultant I

Technology Consultant I

Responsibilities:

Security Engineer will report to the Security Engineering / Application Security Assessment Manager and will be responsible for reviewing IT application software and infrastructure design and implementation plans for assurance of operation in accordance with applicable security standards and practices. Primary responsibilities include information security risk assessment, coordination of application security assessment along with review and communication of results and remediation plans, and security review of application changes and data exchange requests.

Position Responsibilities:

Serve as primary information security interface to the assigned projects to collaborate with business representatives, systems development, and business users for establishing business requirements, information security functional requirements, security solution options, and implementation plans. Maintain an understanding of the enterprise IT architecture including application, database, and network/infrastructure components, data flow, and system and user access. Identify security requirements for applications, services and supporting infrastructure and effectively communicate requirements to application development teams and project teams.

Review static and dynamic application security assessment reports and consult with developers who remediate vulnerabilities. Identify and explain the risks associated with the common application and IT infrastructure vulnerabilities to application and project teams, and recommend mitigation options. Identify threats and risks to the confidentiality, integrity, and availability of all data residing on information systems platforms. Recommend appropriate security solutions and review remediation activities for completeness.

Assure compliance to security policies, standards, and procedures, including HIPAA, HITRUST, and CMS compliance.

Qualifications:

Top 3 skills/

Experience:

• Expert ability to communicate clearly and simply across broad audiences in both business and technical terms.
• Experience with review of security controls across a broad spectrum of information system technologies including applications, databases, network components, servers, voice, user endpoints, mobile, corporate IT infrastructure, and cloud-based technologies.
• Experience determining and validating technical security requirements using software development and system lifecycle methodologies.

Required Skills/

Experience:

• Advanced written and verbal communications skills
• Ability to prepare clear, concise, and persuasive communications for multiple audiences, including demonstrating effective writing and presentation skills, listening actively, and projecting a credible image
• Minimum 5 years of experience in information security related IT functions
• Experience in performing Information security risk assessments and in reviewing information system technical controls for adherence to CMS, HIPAA-HITECH, HITRUST, and other security requirements
• Familiar with software development concepts and methodologies
• Knowledgeable in SOA, cloud computing, and Mobile Technologies

Experience with a variety of information security processes and technologies including:

• Security in operating systems, network protocols, web services and databases
• Secure IP network topologies and components
• Risk assessment and management
• Identity management and authentication
• Directory services
• Application security and systems development life cycle
• Data and systems integrity controls
• Application of encryption technologies
• Business requirements development and technical architecture development
• Change control and release management
• Network and application security assessment and ethical hacking
• System planning and integration
• Ability to adjust to changing priorities while multitasking effectively
• Ability to design, evaluate and document processes and lead teams in accomplishing process review and improvement
• Ability to interact with technical managers and development teams to articulate requirements and processes while collaborating on design options, implementation, testing, and user acceptance
• Experience in project management,…